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(54) ELECTRONIC TICKET SYSTEM 

(57)Abstract: 

PROBLEMTO BE SOLVEDiTp make Hlegal use by _ 
forgery or duplication extremely difficult, to certify 
the content of a ticket to a third person, and to 
maintain the anonymity of a user at the time of using 
the ticket in an electronic ticket using environment. 
SOLUTION: A ticket preparing part 4 of a ticket 
preparing and issuing device 1 prepares the 
specification of a ticket corresponding to a 
prescribed service or article based on a ticket 
preparation request. A ticket issuing part 5 issues a 
corresponding ticket by inputting a ticket identifier, 
certifier identifier, ticket specification identifier, and 
ticket additional information based on a ticket issue 
request. A ticket certifying device 2 holds the ticket 
issued by the ticket issuing part 5, and certifies the 
holding of the ticket by communicating with a ticket 
verifying device 3. The ticket verifying device 3 holds 
the ticket identifier and a ticket verification 
procedure prepared by the ticket preparing means 4, 

and operates the verification of the ticket by communicating with the ticket certifying 
device 2. 
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y hmm^mMmm^^nr^^try hmm^m^mm^ 
^, '>f£< t^9-^y hmmmmmmm^^^y hf>^^ 

^ffmm\t. '>ti,< t^^^y h'j>m^mt^^y hm 
m^m^^^-r^9-^y h^mmm^i^^mt. m^m 

t. 'p^< t^fSEB^^mmmmmt^^y h tt)^i^^^ 
m^f>^^i^^:it^nmt-t^m^^^y hi/XT^A, 

^y h-'Ammmt^^y hu^mmmti^^fji^zt^i^m 
^•^T, ^^y hmm^mf)m^x$>^. ^^r^s^^ 

It ;i < ^ PS P <h O 7C <h TC & ^ <h O 7C O ^ ft 
iry \- iyT.y^AX^'oX. SiE 5^ ^ S BJ ^ /j: p^g gfj jjg ^ 50 



^ }^ f -5 ffi ^ « ^ ©: ^ A C «!: € i^F <i: f -5 ^ 

^^f ff ^$«}^-re^^u/ K:^ H^^^^l^/t c 
t.^^m.t.'t^^^^'ry N'>X-rA, 

[^J^^l 2] ifs^JIl 0 f3®<^^TF5"^:y h>^X5=' 
. f § ^. n -5 if ^ ^ ± SB SE B.^ SI g 75 i J& ± gE «^ M @ (C ^ jii 1" 
I^^^ 13] If ^Ji 1 2 fB^(Dm^^^ h '>;^^ 
/cC ± 12 IE 0^ ^ © O F*g $15 ^ ^ e> ^# 6 n -5 ft ^ ^£ ± 15 IE 
^^y h i^T.'rAo 

im^mi 4 3 lf^:^9 ^ft\tl OIZ^<Dm^^^y 

\t^^y h(D^mi^^5r:r^^^m^^iry hiilS^ 
}r1rX^^f)^iE>m^mA.^mf3:mX^^L. ±m^^yh 

&^'r^mmtLxiEL<u^>h<Dt:mm'r^ct^^ 

i^^mi 5] 1 4m^<Dm.^^^y h>^7.7- 

mmizmm^^mL. ±t^mm^mi}t. ±gH^s£^©75^ 
^^ii^n'Sft^fcb/tT^^bT, "^^y htmm^it^ 
nti. ^^y h<D^^i^^m'ri^mmm^siMLx. m 
^u^try h<Dm$bit^^t,y\tmssi}trji'Drci^'yy h<D 

A. 

svT.T^ATd&oT, ±^mm^m<D\^&vzm»m^m 
\t. h(Dtio>i$^ tLxmmr^p^m^mt:^^ 

MmMm<ommx^try h<D:hry >^ tLxmmr^p^ 
mixm^m^^xm^^rffjii.^. mMmmf)m^<Dmx^ 

x: MmmmmizBrnr^ii^mtLxiELK fjii^t>(D^ 
i^m-r^ z t^^mtT^mi'^^y s ->xr-A. 
im^m 1 7 ] m^m i e (Dm^^-^y k ^-x^at 



3 

izm^^e^mv. ±td,mmmm\t. ±tai^mmmi^^i^m 

[^^3^ 2 1 ] it^Tg2 — 2 0 ©^^rn^&MciB^cDm 
mi^f^m^t. ±fE.mmmm:^^±mmm^zmm^mhx 

[lt^Ji2 2 J 1^^^ 2-21 CD ti-rndWC iS^CDm 
y h i^T.v^AXSo'DX. ±IS^IiE^l^tt, ±ia«l 

-E^nos^ff $s^^^#■r^«^IE^®@#ft^^^^^^- 
[it^ii 2 3 ] m^m 2-^22 <D\^^'mt)^\zmm<om 

^^jry hU7.y^AXSb^X. ±IHiE^^g(^, IgUff 

(if ^112 4] if*]g2 3om^5^^'y h 

5lft?S7^i (n. E) T^O, A (n) i)^mn<DTX^W^ 
i)^m±tt^^W^(D{tLW^Xh^ . ED=1 mod A 
(n) T^t), hOfrf^JDif ^;<i^L-C*» 0, iEBJg 

ia©WftlS7!i^|gJ^<D-:^f^i4&5?gcd„ (L, n) 
13, ^^r.yh;:itt :=D-dD (L, n) T^^6nT 

IS^^mW^m^, (L. n) ^ti^<h-r'5^^i:cr)y^n I 
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TCDIIC' C'"*'- mod n iibTiEl^lf^S^ff^ 
"TSC: t^^mt-r^m^'3''ry hv-XxAo 
[^^:^2 5] if*Ji2 3 gS^om^^^^-/ hv-XT^ 

^D'x^mmm)^ Cn. E) T^O, ED^imod A 
<n) TSO, 5"^r-; Sof^iJDltS7!t*LT^ t). lE^g 

m.m^mntim^(Dm.d,xi^K^ s f (d„. l. n) ^ 
L, n) x^^^t\x\*^^ t^s ±.ummmm\'i. mm 

^t, C(OmnX(D-1j^^m^mi (do. L, n) 
$f^^<hf SIS^chtOfenTOlIC C'*'"-^-" mo 
d n <!: bTIE^gif $S^tf-#-r^ d t^^m.t^'T^m^F 

[ii^Ji2 6] m^m2 StE^O^T-^iry hi^^isT- 

(p. G. g, y) -e^O. y = g'T^IP, ^^r-zH 

l^i^m^d^ (L, y) X^O. ^^yh^^t :=x- 
dtt (L. y) T^;ienTVi^<i:^, ±iaHiEBJi^@ 

«i:-r^^^<ha)iac' C'"*^*" i LTIiE^tf ^^f^^•r 
[|f^lS2 7] fif^:^2 3 IB^CD^^^^r h->;^x 
(^d^H^if ^75^ (p. G. g. y) T^O, y = g'T* 

30 0. ^^y h(Dntumm7^^Lx$>o, Mmmmm^mn 

^tLX. ^{ry h/}^ t : = x- f (d., L. y) T 

:^fS]f4g€^{iI f (d„, L. y) ^f^W^iit^mmt^ 

mn^md^r^zt^^mt-r^m'F^^y hi^^^y^ 

Ao 

[m^m2 9 ] if jSJi2 8 iait<^m^^^>y h '>xt- 

AT^oT. ±fB^l!E^^^»S. ^SEff ISC tSEB^^ff $SR 
hl^HSff?^ <n. E) <hOii|^. ilB^ft^R^ 
mnXEmLrzh(D^Ctit&L. ^^yiy hmUf}^$> 
^-bX^r'R 'mod n = CI IM (C tM t<D\fy hM 



5 

L^try h'j^^mmm (n, E) tcom-^. I $^d6-J^^ 

V h 5^ ;^ T* A . 

it $R ^ t i ;t If- ^ ^ i£ -r d <h ( C cfc ^ T liE ?g <f $S ^ ^ f 
[i^J^JiS 2 ] ^^^3 1 I5®<DmT^dr.> h->;^^ 

^b^£Eo <i: bT, ±SaiiEqg^M«, 5^^r K tJj^ t : = E , 2( 

(D I ID T^A^nrtr^^ t^, ^^^y K t ^d, 
(C J:t>T^-^L.T^^ry h tK^^ff ^ D i: 5^ V 

A. 

[if^Ji 3 3 ] l^^:^3 1 Sa^CDm^^^ru/ Vl^T.'r 

-fk^EBirb, h (L) ^-^^^Wi^hX^X. ±HBIIE 
^i^gfi, ^^ry t : = Eg (D t I h (L) ) T 30 
4^^^.nTVi^i:#, ^^r^v h t $do fCcfc'::>T^-^L 

-:^f^il5^Mh (L) ^^fh^-r^cttCcfcO, LCO^ 

A. 

[if ^^3 4] If^JiS 1 tE$feC0m^5^^ry Kv'Xt^ 

Ofd-Jt}DiS^;5^L Tib 0 , SEI^gS^Wit^Ti^^'SPiP^^ 

Ik^&EuiL. h (L) $-:^ffi}1i§5lfc<i: LT, 5"^ty 40 
h;5M:=(Eo(D),h(dBllD||L)) X^- 

^€:do (C ct-pTS^LT^^^ry K l^-^if ^ D ^ ff-gC 
^^';/ h t (^^2fi)c^t-*f6]f4gi^Mh (dp I 

X X 5^ A. 

^=^^'ryVi^7.^Lx'h'^xyk^m^^mm.\i. tB^ 
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[if ^^3 6 ] if*:^3 5fS«£(Dm^5">r <y Vi^Ts'r 
C^l] 

D D ^ 

C ^ mod n 

tLxm^'T^^it^^mt.r^m'F^^y hi^;^^ 

A, 

[if ^113 7] if3^Ii3 5mm(Dn^^^ y h'>>^5^ 

m^"^^ y hmmm^^m^^tzitW'^m't^^z. m 

:^ it ^ « J# # ( z ^ $ n tb ft ^ ^ ffi ^ T K liE If ^ 

^, mtimm^n^B^\z^^i^tir:imf3mm^uiii.. 

[If ^^3 9] ^^:^2 SfS.m<Dm^^^y hi^Tsy^ 
Ao 

[if^R;i4 0 ] if^^iis 9mm<Dm^^^y h vxt- 

ummx tm 2 (omminm p 
im2] 

X = mod 

[if?feji4 1 ] m^m 3 9 um.(Dm^^^y h vt.^^ 

p= 7]^ mod p 

^^mtt^m^f-^'ry h->7.xA, 



( 5 ) 
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\fy hmu^zMlyX. 

X \ \ u = /o' mod u 

2 <^IE^1f ^ p ;0M ^^id^^^SiRg^i: UT, ^ -5 xi < 

I tcMUr, 



CKT = iO 



mod 



$:i^fc1-i:#fC^2cOiEB^1t$g75^IEH.ii:i|yi^b, 
7=-A. 

nm^m^^^m.^zi^n^titcn^^m^'^f^'t^ctL 

[iil;^^4 6] iS*Ii2 3 13^(7)11^5^^ y hv'AT^ 
(11^114 7] 113^112 3 BS^com^^^r-; NS^Xt^ 

AT^-:»T. ±.mKmmm\t. p^mi^mt^^y hi-^ts^ 
m^-r ^ z ^^^WLtr ^^^^^ y Hv-x^Ao 

[it^^4 8] ^*^2 3fa^(0m^^^ry hv'XT" 

Wi\z^n'r^zii^^mt't^n=F^^y h vxxA. 

[?f^^4 9] if 3^112 3i2mcOI|^5"y hi/Xr* 

^TS^if J: 0^2 (DmLmm%^±f^t^ zt^^ 

A X X . Ji^M'^M:^M ^ ?fii$ <!: L T . n^s-f ^ 

(v) t^m-hL-^n^bt^s ^u^m.mm-t. ^205XggE 
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20 



30 



P \ — mod V 

bT^J5fer^C <i:^#i^<h-r^^^5^^'> S£^X5^ 
Ac 

[it ^^5 1 ] 10^114 9iBifc<Dm^5^^r-/ h'>X5^ 

^j>mmm^ (p. g. q. t?) iibr, 

Tj = mod p 

<kr)m2<DKmmmp^ 

p : = mod p 

i bT^jBrfe-rseiii^&^gfcfrs^^^^^u/ h5>X5^ 

A« 

Cli5ttli5 2] mJ^m4 9. 5 0 ^fet^ 5 IIE^COH 

i^^mr^\z. xtjmm^t^^miz^w^nr^A^mm 
tm2 (Dmmmm^^ofB2 omm^m^m-w-r^ z t 

^^WLiiT^m^^^y hi^XT^A. 
[iif^l^liS 3 ] 5 2 iH®om^5^^!y h '>X7=- 

^^ff^S: (v, £) iiLT. ed^ 1 m o d A 

t^^m\z^^^tirzxt!mmti t m2 (ommmm x j; 



mod u 



^ u-T^^r 5 c <!: ^i^si i-r^m^^^^/ h S^X 7=- ' 

Ao 

[lt5^Ji54] lf^Ji4 9, 5 0 ^/^f^ 5 1 gS^com 

n^m-tmz. x-hmm.^^^mz^n^ntzKti^n, 

40 [it*Ii5 5] if^X|5 4 gatgO^^^^^r y SvXt" 

x^^mL^^^mz^wt^ntzx^^n^u. t.\.. 

^2 (7)|gIEff $9^ % tf^ ^ 2 OS.iEtt$S<^ z I I 
a \Z'^mt^ZL^^m.tt^n,^^^y h v-X^^Ao 

^-try V^nnt^^'f-^'ry h %ff S ® (C *3 T , 
'>/cC< ^h^try hmmmn^^Wt^^tr y h 4^ Si if 

50 iSfa^l^^lSri:. 



^^y hm^M^m.\z^^^x. 

^Ty hf(j^#oiwif ^^^H^-r^^^r*;/ vnmm^^ 

^pu< th9-dry hm^m^mt±ts,^{ry hmmmm^ 
mmt^^^ ^^^^ti-fty'i?^ j\^mnf)^^r^^^dr y'h $ 

(i^y^< ^h±^^try hmm^^^mnt±t&^^y h 
mm. 

^iry h^m^^xm^^dr y hWEmmm^zj: o^^-^ti 
ftmmmmtii^MLx ±ts.m^^ ^ y hMBM^m^mn 
^i>^±fe,mm^m'r^zt^i^m'r^m^^^y k^^se 

t. ^^'^^y hm^^^m<Dmmmmt\zm•:S1,^x±^ 
i^tiftmmmmi^^. ±i&^^y hmmmmizmmLx^ 
^^tixi^^^ct^^^m-r^^mt^^-r^cii^si^m 

Ci§^Ji6 1] ^mmmii<kaMmmm^m^>x^v 
mmmmy^fk^z^i^^x. ±BmBMmm\t. <}^t^<t^^ 

C 0 0 0 1 ] 

-cr)# J^Jc:::,,^ ff 43 fi^ flTl *C ^ "T -5 . 

C 0 0 0 2 ] 

[tifjitcots^] Wfji^. x^m. 
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I5l|gc#, ^^U^-i- h':^- 

^ <hi6T^^ry h iff? -5^0 -tetC^^^yhfi, %\m^\Z 

^^xmn:tii^<Disim^m'rzhx^m^tix^^ft. 

10 [ 0 0 0 3 ] c:<^J:'5?5:5"iry h^Cd-et^JK^^^y h 

^^omm^^'::>mT^^y h^mmt^>m^f)^f3i^tix 

3\^-^mm\zi^n^<Dx. mi^^^ryh^mm-r^^z 
\t. ^mtmmz^^^mmm^oMm^^'^^wx^^. 
m^m^^z^o^j^\tjs^±x\^^f)^. mm<D^±\:imm 
T^'^. z.<Dti^. umz^^.-?^iEmm^m±r^z.t 

20 75^, m^^-^^y h<Dnm\ZibtL-z>X-<Dm±<DWkmiiiS.'D 
CO 0 0 4 ] m.^. m'^^iry h\t. ^^y h<D^iJ^9^ 

i^m^(Dmm^'j:^mx'^^^o\zm2(D^^^m^ 

ft. 

[ 0 0 0 5 ] UAT> ^^^^t^m^z^\.^xm'Am^^-t^. 
[ 0 0 0 6 ] mi <D^m^m\t, !^^y vmm^\ziL 

^'^^m iis ^■A,1iL^n-h^n^>^r5\^:t^mL'^^try 

^^^ii^^^yv\zm.=f-m^^m,t. n.=^m^(r^f^ 

[ 0 0 0 7 ] ^IE{cS^b;t^^-> ht^fJ^^B^ih-r^ 
^ij^^fi, =^'ryV^mm^^^\z. ^^yht 

40 x^^ ct^m-r. mmm^^m^izm'&Lx\^^n\t. 

[ 0 0 0' 8] m 2 cotit3l5ii^|?ti, %fT#ia^1^co#ic-^^ — 
50 ^ii^^if^3^i55ifi$fflt>^te:^^/>^;^ctv^<^-c. n^fi^ 




1 1 

[0 0 0 9 ] zi(DU^^m<o~mt^. 8-147 

5 0 0 ^^$S-T?ra^^nTiri^. fijffi^ 

^(Dx^m\^mmx$>^o ^tryh^mi^mf)^^^^^ 

y h^m^^ri^::t^m±Lx^'^^o z<D:^m\z^n 

X. mw^o^^^y h^rfm^^^^i^fzm^oy^^y h 
m-(^^^'^m\zi^i^x^^. ^ft. mmm^zm-r 

Sit ?SS^e;5:<Tt>, 9-^y h<Dm^<DIE^^^m^ 
r S T^iiE7&^ pj T ^ ^ • 

[0 0 10] m3<ommt^m\t. ^m^<omm^^j>mx 
t^^kv \zm2 <o'^^lAm^i^lEl^ft:^mx$>^o 

[0011] zL(D:^mx\t. 9- try h^mmmm^i^x 
mm^(Dmt^'r^i^m (SEsjgg) {zm^x^u\,^^o\z 
Bmr^<D\tm2<D'ittmtimtmcx$>^:^u m.WL<o:^ 

um^\ts 9^y hx^^m^^^m^mmLftf^M^^ 

mmbxu7s^>7.f)mm^nf:izt^^i&'r^ c t 
X. mmmojE^^^^m-r^o 9^v>v tii^7.if-> 
T.t'^^m^mmL^^^^z.L^wtm-m.mzmmt.t ^ z 

[0 0 12] 5^^m^^<Dr c^±7s$m(oftisb 

<D^m^zm^f}^^R^-^tix^^^f)^. m3(o'i^^&Witm 
momm^mmr^:^mf)^. ^ii¥6 - 5 2 5 1 s^^^:^ 
^T^a^^nrvi^o z(D:ij&x\t. m3<D'i^^tiWi\z 
mxx. i^M^f)^^^\mm\zM^^'r^mBM^(Dmmmm^ 

0'itt^mm\zii\-^^mm^\zn^-r^m^m^i$^^m^ 
LTii^o iBm^'i=fommx\t. t^M^n^mn c^se 
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[0013] 

^m^n^^^y hfjm'D^ziii:. mnmf)^. mm^\z^ 

^ftmm^n^XtX. lEh\^^^^y hx&^ct^m 

Mxt^. t\f^ommfc{'fx\:i.^'i'^x$>^o ^mmm 
x^^'^f)^^crzm\z\tmE,m\z^^mi^f)^*2^wx$>^. 

[0014] UfeTi^^X, m'F^^y h\Z\t. :^(OZ^ 

(Dmmfi^'Z^mxh^. mi.^ti. iE^um^\^^rzt^\i^ 

lE^^timmx'^ ^mmx^^. m3.^\t. ^^^yhsz 
^■?.ibntzm%mm^m^^\zmm^^m^x^^. tz 
fzv. f^3 <Dmm\tm2<Dmm^^^hxi.^^<DXs m 
1 3^(Dmmp^^m^titi\t. ^^y h\z^^m<Dmm 
^^^ft^n^. ^j=>\z, m4j^tLx. mmm<Dm^^ 

[0015] ^1 (D^mmmxi^. mmr^mmm^^ 

[0016] mm^n'&mm\zmmm(D^7t^mm'r^ 
:^mx\t. tmmm\zmmm(o^7ti>^B^^i^^\zu 
mmm^^mmizm^Mfj:^(DMi^&^^m^mm-t 
^:^mx\t\Km^yci>m^-^ti^mx\t/3.\^^i>K 
^^•t^tL^,'^oM^xwL^^t^^t^tix\^^^. vi-rnc^* 
'jimzhxhm^^t}^^t^t\^(Dx. m^^^mr^^ 

30 (0 0 1 7] $ 6fc. mmmm^mm\.nLmmmt^mm 
x^^t:^±\zmmr^:^W;,\t^m'^nx^^fs.\^^(Dx. 
zi(D^ot£.m-^x\t^.v(Dmm^^mx^t^\*^. - - - 
[0 0 18] mi (DU^^m\z^i.^x. mm^w^mmi 

$n^7)^ n:^o-'\^^^'^t^^^^mmm\zhrz^ 
^. ^ft. %^\m^i^^^M\znx^-]^^m^-^^^zh 
^^±x^f^K^(Dx. ^iEmm(om.^f)mi.. ^tryh 
\z»z^W:t^m 1 (nmumi^'^ nx\^^t^\.^. 

[0 0 19] ^2(0'^^^mx\t. fiJffi#75*^^UTli 
40 ^^try V^^^X^t^<'t^(D\Zlmz.Xs %fT#;5^^ 
^y h(DlEm^^^m:\^X^^^^^<^Mmo:>P%^hmm\Z 

\t. ^'iy^i:k^(Dm\tf-^ y h^mW'X^r^\^^<Dx. ^ 

Ty h <^ IE ^ it = ^ SEBJ-r ^ C 1 7^1^0111 (C/ct^C 
t.Xh^. ctiti. y V\z^Z^'^f^^m(r>%3i)^'^^ 

mm^ nx c t '^tjEBMx t u.^^ c tx ^ ^ , 

50 [0020] PS ¥8-147500^ li^atC^.T^^n 
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[ 0 0 2 1 ] m3<D'^^^Wi\t. ^m<r>rzsbizmm^n 

CO 0 2 2 ] 4^^¥6 - 5 2 5 1 8 ^i:^$5 $ 
[ 0 0 2 3 ] Ztl^-V\zm^yt^O\Z. 

m±'r^mm^^m.-ti>ftisb\z. m2:h^tfms<Dmm 

[ 0 0 2 4 ] 

^mmr^tztb^z. mi<Dm^tLx. mm^m^ysi^ 
\z^^^iEmmfi^4^n\zm b<, m2:fej:t/m3 <Dmm 

<hUT, ^try h<D\H^^m^^^zMmx^X. m 4 CO 

mmthx. ^^y h<Dmmm\zmmmcom^i&^m^ 

[ 0 0 2 5 ] 

f'S^^r^^ h^fr^eti, ^^y hcDi^mmm^^i^r : 
y h0^mmmtmmmm<Dm^mm^^^^y h^tt- 
^^mt. ^^y h^m^^t. mmmm^n^^t. 

[ 0 0 2 6 ] y h^n^mit. ^^y h<Df^mj^m 

m\t. ^^y h^nmmf)mnbrz^^y h^^i^-r 

nm^ntji^'^. um^f^^^'ti:^ ;it{z^^x^^ y h 

(Dmm^^f<iitsn^. iEm^mnn^^^t^m<Dmn\z:h 
iriT, ^M^mf)^^mm^tift^^yhm^ii^\zn^^'r 

^^^yh^. ^f^^f^^m^^X^mL. Mjit^T^"^^ 
y h/)^^^t ^m^\Z\t. ^(D^try h^mi^^xMm^ 

m^nnr^. mm^m<o^niz^ft-DX\tm^\^n^ 5 
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i^^m^z^^:^ntzm^mnt^s^vtm^^^^\z^t^ 
^tift^^mm^m^'^^:: t:fy^x^^o ^^y h<Dmm 
x'\t. Kmmmit^mmm^^^^^^n^^^y horn 
^ttcDiiH^i:, ^<ry hizs^it^r^mmowm^Bmf)^ 
nr^t>ti^. ^M.^m\^. Mmmmtmm^m^iftLx 
^mL. ^m^m^mnT^ct\z^.::>xMm^fftji 

Vi, MEB<D^M\z^-:>xmmmmf)^^ici}fj,^dry h^^ 

nvxi^^z t^^m-r^. ^^y h<Di^M.x\t. ^^se 
^mit^mmmfi^^^^^ti^^^y hco^^^cDi^m 
10 ts mmmmo:>^t^r^^^yh\zM^^r^mm(omi^ 

[ 0 0 2 7 ] 

1 . ^mm±i^<Dm^ (mi 2. m2 1^29) 

2, mi (ommm 
2 . 1 . mm^fk 

2 . 2, mmtjiMiB:fu hr];i/(^i3.iai9,E32 

0). 

20 ^m^m^^y h 

2. 3.^1 conmzfu Hr3;i/(^14,I2I19,EI2 

1 ) 

^m^m^try h (^mmm^zmnf) 

2 . 4, m2 (DMmya hn;i/(|gll5,l2ll9, m2 
2) 

;<>J^-Xtt-}^m'^^y h 

2 . 5.^3 <DMm:/o h3;l/(|gI16»l2I19,EI2 
3) 

\B\^^m^dr y b (m^^mx) 

30 2.6.^4 CD^tlSy D h3Jl/((2fl6,[gil9, EI2 
4) 

-.^^m^^m^^y h ^m^m-^m) . . - 

2, 7 . ms (DMmzfa h3;U(I2ii7,I2fl9,EI2 
5) 

2 . 8 . ^6 aJ^fiT'n hn;l^(|§I18,Ell9. |gI2 
6) 

Zf'}^'^Yfi-Ym.^'ryV k^\^^X) 

2. 9. ^70^^yDhr3;i/ (I2II8, iai9, EI2 

[0 7 ) 

2 . 10. ^8 0)^15 :/P KiiJU(EI16, [iI19.0 
2 4) 

2. 11. ^9 0^i§yp (EI 1 8) 

2 . 12.^10 (Dm^^U hD;U (1318, 01 9, 

El 2 7 ) .r^,.^ : . — ^--...w 
U H ^3 - K 1^ ^ h 

0 2.13.^11 (Dnmzfn (i<(c;^cL) 
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2 . 14. ^12 o^fg:/D h=i;i.(gli9,lS3n 

2. 15. ^1 ZOl^m-fu (I2I3 0) 

3. m2(r>%mm 

3 , 1 . ^IiE#& 

3. 2. ^ 1 4 (D^|§:/D h (EI13, IS 1 9 , 

2 0) 

3. 3. m 1 5 <D^i§yD S 3 (EI 3 2 , ISi 1 9 , |g| 

3 3) 

5. mA<D^mm m^. ks) 

C 0 0 2 8 ] C 1 . IIJSM±^^co«|J^] 

(^1. [S2. @3, iiI12. ISI28, ^29) ^1(^ 

(D^-^y h^rf^m\zm'::s\,^x. ^^y hmm^f-tmrn 
^mwi^t^^y hit^^wi^t^iry hnmmn^x 

[0.0 2.9] ^^y hmBMmm2u. ^tr y.h^n^m. 
5<Dmni^ft^{ry h^^i^L. ^^y h^mmms t 
mm^ntj.^^^'tryhoi^^^iiLm'r^o ^^yhi^m 
mms^t. ^^y hi^^^mAoyi'^mLrz^^y hm^i 

\t. ^^y hi^fs^ ' mn^mmi s ^^y hMBM^m2^ 

^XS^try V^mmWi 3^^n^tl^^y Kft^ • ^fr 
^^y hmm^ii^U^^^y h^M^^fc\tm\zf^ 

[ 0 0 3 0] m2i5^z^m3\t^^y hjff^ ' ^nmm 

1 O^^^^^^t LT^LT^^S. ^ft. mi2\t^tr 
y hMm^^m 2 ti^rJ^^ y h^K^ms <Dm!i!Si^±i$ 
tbXTFLX^^^o fj:^. 2 *5 3 
mf$.^y^LX\^^^. 7t;t*L/, EI 2 7:>^"j^6<i/d;^^Pir^l^ 

C 0 0 3 1 ] Ei2ic:fei^T. ^^y hi^^ ' ^nmmi 

\t. ^^y hi^f^^ (^m) 4 , ^^y K^FefrSB 
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^) 5, ^^y hmm'f-:$^<-:^ei^j:zj^mm^mm 

^IC, ^try hi±my'-^^'-X8f}^^\-fi^nx^^^. 

^^y h{^^ ' ^nmmi <Dmm csji^) \zr:)^^x\tm 

[ 0 0 3 2] ^1 2{C*5C:}T, 5='^^,;/ h«liE^g3(l, 

^m^mmtfmi i i *3j:t/iiftgp i 1 2^mvx^ 
1. ^^y h^ms^i 2 2, ^^mm^mui 2 3, 

10 ^f|5:|^SI^J^igI5 1 2 4, SEBJ^MS^fr^ 1 2 5*5J:t;:®jt 
^12 6/&WbTLi^o 

[ 0 0 3 3 ] 1212 9ti^er;/ hSE^gg2C0SE§g^M^ 
ff 1 2 5 eDi¥M;k<i^^^bTi5 0 , m2 B\t 

^^y h^mmm 3 co«igiE^jiiiiff 1 1 1 (ommtsim 

^fe^^bTl>^. 2 8 ^ctr;ia 2 9 (C^Tcfc ^5 fC, 2^ 
^JS^iJtfJ^, IiEig^M2 cD|I?g^j[illfTBI5 1 2 5 fi, 
ftBi5291. S(i^2 9 2, ^ 1 CD0liC^ 2 9 3 , ^2 
001^^2 9 4 , iE^14^iElf52 9 5 , mMmm±^^ 
2 9 6, ISi^E^^^^#lfI5 2 9 >\ ^ 2 (75^ HE If ^^i^^ 
20 2 9 8, mm^^W^2 9 9 , m;^1f $a^l^^2 910, 
A:^ti^^H!Ffi|5 2 9 1 1 . fflt^g|5 2 9 12 tti^^mi^^ 

[ 0 0 3 4 ] ^iE^g 3 (Di^ummmnw^ i i i\t. ^ 

fi^35 2 8 1 ,^m^fl$2 8 2, ^1 CDi^^gS2 8 3, ^2 
(Dmm^2 8 4, iE^1i^ftE«fP2 8 5, ^ ilE ft $8 ^ ^tg 
2 8 6, |giiE<t^^l^ai52 8 7, ^dry h^SU^^^tSP 

2 8 8, if ^^^^ei5 2 8 9 , mtimn^nm2 s i o, 

Xtimm^^m2 811, tB:^|f|528l2, A:^^28 
1 3, mmMmmm^t^m2 S l 4 i:;)^^^^!^^*!^. 

30 [ 0 0 3 5 ] ^T<Dm7r:\z:t5\^^x^^mmffm^m^'r 
^^^<D^i^^^i2^^tL%<D^m\^^xm:m^m • ^se^;i 

. ^mnt.^^<D tT^, - _ -- 

[ 0 0 3 6 ] C2. ^KDmmm] ^-r^^^^gc^^ i co 

[2. i.^iE^^] ^^y h\t^^y h<D^mmnt 
mm^2(Dm^mmtf)^^^^y h^nmm\zj^-Dxw 

40 [ 0 0 3 7 ] 
[1^1 0] 

n = pQ» A (n)=lcm(p-l, q— 1) . 
(ZCXl c mt^^/M.MSIfi[^^'r) 
[ 0 0 3 8 ] 

[^11] ED= 1 mo d A (n) 

^^'T^mmmnt't^m^^z'Di^^x. mmxt^^^y 
h<DKm:^^^iz'D \^)xmt^t"^:..-.z^- ..s. — 

[ 0 0 3 9 ] ^^y h\t^<ry h^mm^D tMm^® 
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T^O, Mm^2f)^ (C. n, t, L) izMLTmm^ 
m^^^dn^m^^X T (C, n, t, L) =0" mo 

[ 0 0 4 0 ] M^tf, d,^$>^mn^<Dm^mti^. 

[ 0 0 4 1 ] 
[^12] 

t : = (Et, (D) . H (d, I I D I I L) ) 

(omf^X'h^. ) 

^^yV^ (1) t Lr3t^-r^<i:, ^^yh^ffll^^c 

m^m<Di^m\nmiT>\z^^^mtc' mod nt^, a 

(C. n. t. L) (C^tLTSEH^I^gcoS^tf $Sd, 

fCcfcoTEo (D) ^m,m.xK^mm^xD^]a\m 

D<DMS:^ liXiEBJ^gF^TC" mod n^tf^f 

[ 0 0 4 2 ] ^tz. d, €:-:^f^ttli&c!: LT, 
[ 0 0 4 3 ] 

[& 1 2] t : =D- do (L. n) 

[0 0 4 4] h^±^<i: bTJ^^-rs <h, A:^ 

(C. n. t. L) (w^UTD J;S?^^<bC" mo 
d. nti, C'C'"*'-'* mod n ^ ff^l" -5 i (C 

L OM<^^:i^1tt)DO{itt>IiEHJ§g 2 <0 ^ ^ ^ ff p 
itnX^^Llr^V^WLt)^^^ , . ... ... .„ 

[ 0 0 4 5] Mm^2<Dm^mmdi, t (c. n, t. 

L) {znVXC' mod n^ifW-r^^m<Diii>f3i< 

[ 0 0 4 6 ] f^:^, &.T(Dmm^m<Dm7j^^zi5\.'^xmi 

9 (Ct3tj-5Xxiy 7^1 9 4iU^fi±TfC^ii-r^. Lft 
f)^'DX. Tsy^ y Zf 1 9 4 ommU^M ( P r o v e r T 

[ 0 0 4 7 ] [2. 2. m^UMMzruhoji^] 

(Mm^2f)mm^i^'o^mmm<D^^y mis. 
mi 9. m2 0) &.y. ^m^s tmm^2 tcoMHo 
mmum^^^fxtstmi-^. ^T(Dmx^tEi£m^2<Di^ 
m^mtLxm^^M^t^-D^o^tT^o fj:^. j^tx 

\t. ^m^mtm.m^mt^^insbXM^::/a h:::2j\.t 

[0 0 4 8 ] 'mmrj.n^(DM^z:ti^{i^^^^^ 3 <Dmf^^ 
m 1 2*5cfctXEi2 s\z7^L. ^m^m 1 3\zvt-Dxmm 
Km^ 2 (Dmf^^m 1 2 is^zj^m 2 9 tc^K ¥ 
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[0 0 4 9 ] «l|E|g3tt, iSIEif $S^fi£^2 8 6 
U>vC^^£fScLT, |gIiE1f^^^^tg^ 2 8 7 (CtB^r^ 

(xt^'vt'isi). z.<Dc\t. j^^\zmmLrzm^n 

tf)<m^.U\^^. mmm^^^s^2 8 7 iz^m^tifzc 
t. ^^"¥-^1^32 8 s\z^n^tix\^^^i^mi^^vt 
r^^^y h<Dm^i^n t^^ttbx. mmm28i^ 

IDiiEBJ§l2 'viiffr^ (T.y^y'fl 3 2) . 

10 [ 0 0 5 0 ] M.m^2\t. i^u^3f)^(bmm^nft 
(c, n) ^^mm 2 9 2 x^m\^x. mm^mm29 

9 (CgS^I-^ (X^u/ 7" 1 9 1 ) o 5^^r>> N^^^ 1 2 
2\t^mLrcn\zMJt^'r^^^y h^^^y h^^Ul 

2 if)^^mLx. ^^y h^i^-Dx^^^i^^^n^-r^ 

iXy^yy I 9 2) . fcfcL. I mm<D^tr y h V^^^ 

y h^mT^m\t:^m\ZfjiKl . ^ tr y h -o X ^/i^ 
^nm-r^fzJffX^^. Z<Di§^\Z\t. X5^y:/13 2 
tCiStiT^IEIgS 7&»^ (C. n) ^m^*^^mitrji<fJ: 

^CO^^d (Xy^y^l 9 2) :BXZSXT-y ^ I 9 7 
^\ZU^. Xy'y'Zf I 9 2<Dn^(Dm3k^VXMm-r^ 
^^y V^^tLfl.^i'^^'k\Z\t. \^'Xi^>7.K\Z=f'^y V 

T, tt^^l^^ 2 9 9 (CHB^T^ C:^ 7" :/ 1 9 7 ) , 
Xt^-z^I 9 2<Dn'^<Dm^t:\^xn^>^r^^^ y 
i^oJti^fCfi. ^^';/ h t . SEigig 2 O^mP r o V e 
r., ^^y hf^JjO^f <£:SiJ^SP^ 2 9 1 2n\Z^Ly V 
30 f S (X5" y >^ 1 9 3) . 

[0051] T.'ry'f 19 3 T^^^fr $ tl/t ^ . 7.=ry:f 
1 9-4^||i8iTS« CCD^^(D.M(c*3.tt5->;T-^:/-y 1 9 - 

4(oumn.^m^m2 (^\z^^xnw^'t^. f^^^^^ 
mui 2 A(r>m2(o^^^m^^ut^^m.^^\^fz^(D 

it^UT, ^'r y Vt^^<D^^xmnx^^t'^%\\'^^:^ 
(X5^u/7'2 0 1) . ^:co4^J^tC(^, ^^^ISiiLT^^ 
i^n<0^^%Zm\^X\i^^^^\Z\t. t i m e 7!^^-tC7?^ 
TP^^JtC^bTimtf.^^Tfe 0 , 'M\.X\^ts.\^ri\t^ 

^n^t^-[mn(nmzts.\^i^\tm^x^y). ^^\zhn\t 
^^hxh^tn-^x^^. '^''ryV^^nxh^tn'^ 

Ufcii^tCti. mi<D'^nn2 9 Z\Z^\^X'^^. R: 

'=c" mod n(r)^o\z^n\^x. mm,^^^2 9 

9(ClB^f^ (;;;7^*>7'2 0 2 ) . ^\ZK(DZQ^^% 

m^n^2(n^(r>'mi(n\^%^2 9 zxr^xw^ni. 

• X <fe V5 i)U~-^-tr y: h ti)^ i =.D — d , ( L . n ) (75 J; 
^ ic^^^nrt^a^^tcli, C' mod n(??gt^ 
50 liC'C""'-" mod nCDJ:^tct)ff-^T^-£)CO 
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-e. C mod n ^lEBJIg 2 (^^f IfpCLT, Km 
mod n<h^IEBJ^2 (T^nTStt^^^ii-T ff^T# 

[0 052] Xr*v:/201 tC^SViT^^^r^y H^M^T 

^^r-/ h^J^as 1 2 1 ;!)^^giJ^bT {X'rvZfZ Q 

(CO^J-et^ 1) «:i^;£L.T. If $S«t^gU 2 9 9 fc 10 
12^1"^ (X5^!yy2 0 4) • c: d ^ Tf C O 3):^ |§ 

( 0 0 5 3 3 Xt-u/ 7^1 9 4;!>*||fT$nfce, T.'rv'f 

1 9 3 T-lru/ h^n/c t , Prover,. L^£0]iiPiaS 

2 9 1 2 75^e>^^1-'5 (X-T^y 7^1 9 5) . XT^^y 

9 5 t) b< (1X5=-^ :/ 1 9 7 7&^|^fT^n/c<E), R^i^M 
BiJ 2 9 1 i: D^iiE§§ 3 ^mm-t ^ (X5='y >^ 1 9 6 ) o 
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[ 0 0 5 4 ] ^iE§§ 3 \t. ^ftHP 2 8 2 fC*3l.iTiE|gg§ 
2;5^ei^m$n;^cR^S(tUT, It ^^^^^ 2 8 9 (C 15 
^■ra(X7^:yyi33).R:=R' mod n€r 
m 1 <75it^^2 8 3 TffgCLT. -eofhg^^T&^^IiElf 
S^J#gP 2 8 7 T'IS^UTi.iaC<i:-i^*r'5;&^^, lE^ 

'&^m^2 8 sT^ij^er* (x^^y :/i 3 4) . -a-r 

2 8 1 2 ct: 0 tfl:^^So L/^ct^^ <i:^J3^$ ti^ 

fjif}^'Drc<DT. rte^ij .^^•rsm:^^ai;'jei5 2 s i 2 

[ 0 0 5 5 ] i^<±;&«^i§cofB!^/<i:^jr^S» 

[ 0 0 5 6 3 M^^m^mm\zBm-r ^ e^T(^<h*5 

[ 0 0 5 7 ] 
[^13 



C raiii<d 
seiad (C, fi) 
receive ij 
iZ := R^modn 

oistpntl: ' 

otatpu4 * 

P rover 
if time < L 

R mod n 

else 

[ 0 0 5 8 3 [2. 3. m 1 co^^ya h33;H 
(«^IiE§g 3 ;:)^^^f^^^#'^^«fl#l/05^y EI 1 4 , 

[gl 1 9 , EI 2 1 ) ^IEfg3 hm.m^2 tCDS^CD^fgO 

[ 0 0 5 9 ] ^-r, m 1 (^^iST'a JKCt?C>TgJtBJ 

f±¥7:i:^SLiS:Tt^7^d:< , m^n^2(omL^^mm^iti<r>^{^ 



40 ftlSL <i:0^^(C'6!c??-rs 

[ 0 0 6 0 ] ^JAt^, ^mEI§ 3 75<^^5E»§^J$:^i^-r'5ff 

[ 0 0 6 1 ] ^ 1 (??Mii&yo hn;U(D^SE§§ 3 O^Jl^ 
IS 1 4 IC, lE^li 2 0#M^I2I 1 9 lC^n^'n^-:7Tl5i 

^-rr^-^^ ^.-^^ 

[ 0 0 6 2 ] ^lEgg 3 Id:, SggiE1t$a±^S152 8 6 TSLS^ 
50 r^i^L.T(X7"-yyi4l). ri^(^3^ 
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coP^^iJ t i m e t^^^'^VX^^ i^>i^C^±f^LX. 
mpi^^^ r t t imeO^^ti, C:=r i I t ime 

y 1 4 3 ) , 

[ 0 0 6 3 ] mm^ 2 (ommomtiit 7.5" yzf 1 93^ 
i^^ib^m^tifc (c, n) ^^mm2 s 2x^mi.x. 10 

ff^^i^f5 2 9 9 fClB^f ^ (Xt^u/T'I 9 1) o 
y N^^ISJ 1 2 2;&<^{ib/bn(C^^£;-r-5 5^^ru/ 

h^J^SP 1 2 1 ;5^6«bT, 5^^r h^fiSFoTV^S 
ft^^Pl^-r^ k^=rv:f\ 9 2) . nm^'t^^'rv 

2 9 9 fClH^r^ (;^5=-y 9 7) . ^f&f^ 
^^r.;/ h^it::>i©^tCfi, ^^ru/ h t , iEH.g§§2 CD^m 
Prove r,,^^y h #ljnft^ L ^ir y h-TS (X 
T^yvT 1 9 3) o 

[0064] X5^!yyi9 3 ;5^llfT$nfe ^, T.'ry'f 20 

1 9 4 Srl^JSr^. m 1 (^^M^n M:;P{::*5tts;^5=- 

7 9 4 (Dmmu^m^mz i cts^s t i m 

e^Jftffi-^^ i7.'rv^2 1 1) • CcDfi&mtCfi, C 
e> Stt 6 n 7^ ^ CD T & CO ^ ^ 0 ttJ -a* J: 0 i • 
C 0 0 6 5 ] ^J;tt^, C75<2 jiJ^^31^nTl>r. t i 
me<0:^$*| tLI \ \iv Vt.^^t^t^^\ts t i 
me:=C mod 2 " ' ' * (C J; TIR 19 ffl t* il t 
T^S, ;^5^!y:/2 1 irt ime*^0tBL;t6» L 
gB^ $ nr S ^ij PS «P JIT & ^ ^^^RB <i: It^ U 

h;5^^cOB^;^T^^Tfe'2);6^Sii«i^T^ C;^ 5^ *y >^ 30 

2 12). zi<on'^\t. mw<DMmm<D:^7'y:f 2 0 1 

2(iR<hLT, R:=C'' mod n^micomi^m 

2 9 sxmwi^x. mm^^^2 9 9 izf^m-r^ ^t^j- 

iy:/213) . T.J-vrf 2 1 2(Om^t.\^X^^v Vi^ 
\ 2\ii^^'5''Xv V^m^\^X. ^\Z=f-'rv hti^M 
^Wl^\^X. jt?5^J^fP 2 9 9 (C!B^r^ (Xt-'>:/2 40 
y 7^1 9 4 <DS^$ffl;^cC#|lST^»^. 

[ 0 0 6 6 ] 9 4 7&?^fT$nrc^, 7.^y-:f 

1 9 3 T-tr V h ^ n?t t , Prover,. L ^^I^T 
(;^X'y7'l9 5) . Ts^vfl 9 ShL<\tXv^v 

-fx 9 7;:f<^fT^nfc^, m.m^2 9 1 7^1^ e^^SEH 3 
R^iiftl"* 9 6) . 

[0067] ^liEiiSH, lEB^gg 2.f)\ 6 21 {t-$-^ /t-R- ^ 

sm^ 2 8 2 tzsff UT, mnm^m2 % 9\ztzm'r^ 

(7.x->:/144).R:=R' mod n^^l(75 50 
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iHS^fflJ 2 8 3 -eff^LT, c:cDill@:$§^75^^>lEtf $s^|s^ 

^ 2 8 7 *ClBi^^nTV^^ C <h-g(-r^^>^, iE^tt^ 
120^2 8 5 T^fyj^^f ^ (7.5^*^^14 5) . -^f^^ 

n;^cCO-C. r;f^j $S*f Sffi:^^til:^SfP2 8 1 2 
e»ai;^t"^o -^L;^j:l/>ii^t^liE0^§g2:<>^:S-«&^d:^^r-/ 

^£li;^^tli:^a52 8 1 2f)^^mti-r^. 
[ 0 0 6 8] ^±;&«^ 1 co^f^yn hn;i/-cfe'5. iEB^ 

§i2;^t^ih^£j^fc;^j:<Tt), mw<D^mm hm\::^mm^ 
^ ;t ^ CO t8 tl ^ II 31 -e ^ ^ 0 

[ 0 0 6 9 ] {JA±0*ti§^^l^feflBStcfSieTS<i:. likT 

<o<h*5 0 -e^^o 

[ 0 0 7 0] 
[^2] 

C := raumdl |4imie 
send (C,n) 
receive 
i2 := jR^modn 
if C7 = iZ 
output ' WSb' 

else 

, - output ~ 
Prover 

if C mod 2"^' I <-L 
i2 := mod n 
else 
iZ:=l 

[ 0 0 7 1 ] [2. 4. ^ 2 CO^^T'D hZ3;U] 
(> >>'\'-X;^— K^<05^y-/h. ISllS, ^19, EI 
2 2)^2 (O^IiT'P K DJUTfi, IE^^JlM(C*3t.iT, 

m% \zm%itn^nftm^mt^mn'L^w^iiw\^ti^(D 
^^^-'■r-^ c t(D^mti-^iim\zn^ti^mmi'L co^tts'^ff 

[ 0 0 7 2 ] Cco^D hnjU-CHSlBJgg 2;5^6^SEgg3 
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[ 0 0 7 3 ] ^2(D^ig>^P hZiJUO. ^U^3 (D^m 

^mi s^z'^-DxmML. SEBjfg 2 (omm^m i 9 \zm 

C 0 0 7 4 ] ©lliEig 3 \-3.^.,^r U > v C ^ IggElf ^ ^ 
2 8 6 T^^£bT. |giEff^^ltgi5 2 8 7 fClE^f^ 

(XT^'y y 1 5 1 ) o «IIiEL/ct -5 <i: 1" ^ 5" ^ *y h ^ jg'J 
J-n t^^LrzC^^ioitX. j^fta5 2 8 1 cfc 0 SE^fi 

2 'Xj^fiT^ (;^5=-^v7^152)c 10 

[ 0 0 7 5 ] mm^ 2 <D^m(omti\t. mw<D^mm^ 

;J^e.iift^nfe (C, n) ^^mm2 9 2 X^iWLX. 

^u^nm 2 9 9 ^zmmr^ (x^^^y y i 9 i ) • 

h^^^fP 1 2 2\t^mLftn\zM^^-r^^^ y 
^ly N^f^^l 2 1 ^i^S?bT, h-^J#oTV>S 
75i^f>;^^^^J;^*r^ (T.y'yZfl 9 2) , ^l^lj ^ CO H i: 

R (C 0 *SS:3tbT, ft ^^^^^fl52 9 9 (CfB^-rs (Xt" 

y y 1 9 7) . 4^J;^0«^:^<hLT^J^;t-^^i^*y H^lt 20 

Ctii^tCfS, ^^y h t . 2 (D^mP rover 

3 ) o 

[0076] X5^iy:/1 9 3 Ti^Hfr ^ nfc . 7.5^ y^^ 

I 9 4 *llfT-r^. ^2 oM^:^D hr3;utc*5^t^;^5^ 

y y 1 9 4 (73^)11 OPSffl/ct^Hi^lgl 2 2 fCt2e^T|ft?^-r 
L;5ii6lJ 0 mUfc, i^WE^S^Z^m-r^ y±-i^ 

Mt. ct^i^^bT, if $s^i^ep 2 9 9 (cfa^-ra 
(;^5^u/:/2 2 1) o c tu<D^^^<oyjm\t. c : = c 
I \ M\z^'z>rmmx^^. m^Ltic^^r>Xs mi zo 

0?|^^^2 8 3 tCiSUTR : =0" mod n^fh^ 
UT, 1f$R-^J^^ 2 9 9 \zBmt^ (X5=--y >^2 2 - ^ 
2) • CC^Xf)U m2<DMm^o hz^)\.\Z:h\ff^7.'T• 
y:fl 9 4 tTymmfsi^mx^^. 

[0077] 7.5"yyi9 4 75^||fT^n/i: "f,. TsJ-yf 
1 9 3 -C-tr h $n/t t , Prover,. L ^r^l^-f 
S (;;x!y:/195) , 7.v-y^l9 ^ ^\^<\%7.v^y 
7^1 9 7 TlJ^Sfr^nfc^, R$jMfigl52 9 l<tO«^SE#§ 
3->vi^^-r^ (;^5^'y y 1 9 6) , 

[ 0 0 7 8 ] ^IE|g3li. iiE0J§§2;5>e»i^{f ^ny^R^ 40 
^{ff5 2 8 2 -e^(f LT. if$S^^#a5 2 8 9 (CfSI^-r^ 

(Z5^u/:/l53)oR:=R' mod n^%\<D 
^%^2 8 Sfff-gUT 1 5 4) , CCDfhg 

$n7tRO±ffi(75*fT;)^ ISIiEm$S«itgI5 2 8 7 {CtE^$ 
nTt^^aC^-ife-racici:^, IE^tt^liE0S 2 8 5 T^f^iJ 
^■r^ 5 5) • — ifir LTi^nt^ r coT{4<7) 

ffirct DMS:l5lf:) diLT C^T^-y^lSS) . tB ;b ^ 2 8 
1 2 cfc 0 tB -r-a . ^ ifc-Lr!C-(.->'7^ n IE 0^ ^ 2- 7>^#5c(i 

^:t'*-r5m:^^tiJ:;^ffl?28l2J:0tb:^t*a. 50 
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[ 0 0 7 9 ] H^Js^ti^W, 2 <^^i§yD h 3 ji^-e^^o 

[ 0 0 8 0 ] 
[^3] 

C rauad 

receive 
i2:=-R^inodn 
ifi2 = C7||M 

output M 
else 

output ' 

Prover 

i2:= (<7||M)^modn 

[0 0 8 1 ] 12. 5 . ^ 3 <^MfS>^D hnJU] 

2 3) ^3 c^M^yP hnJUTti. ^^^r^y hfcMUTSE 

mm2t^'^^f^p^u^m.^n'^< ^try v%^\m\z^^^x - 

fl3<i:li^4<o 

[ 0 0 8 2 ] ^ti. ^(D^mmn^^tit^^^i^K^Z t 

(Dnmzii\.^x\^. p^w^^mo'^m^mmi^x^-^y h 
[ 0 0 8 3 ] m^\t. Km^2iim'Dn^^mm^m.^m 

[ 0 0 8 4 ] ^3i£gg3 0#«i^«iE-r^!|^®1t$5^ 

(<5. v) thx. ^mmz(oi^WLmmznPc^r^'j>m 

mm,^ (£. v) ft^o fzf:£L. £(5 = 1 mod 

A iv) ^nmt^^dryhm^mnL\z\t. ^ 

liE§§ 3 04^^it$aoi>^it|g (v, £) i:, 1^^4^)111? 

-i? >:$'CO±PSfi i ;^^^^^nTti-5. j3?»J;li3:, L: 
= v 1 I £ I I \ (D^oizmf^LX^^. ^tl^tKDm 
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[ 0 0 8 5 ] «IIEI§3 ti, ^Mm^±0^^2 8 BT^^^^ 
[ 0 0 8 6 ] mm^2 (OmmcDmtWtXr-y 7^1 9 3 ^ 

fi^i^mm-^titi (c, n) ^^m^2 9 2x^mLx. 

It^^j^gU 2 9 9 tClB^-rS 9 1) o ^^r 

7 N^^lfP 12 2 \t^mLrcn\Z^Jit^f^'3'^y 1-^^ 
^^y h^JtSP 12l75^^^Lr, h^t^-DXi^^^ 

fi^^vft^^m^-r^ (X7=-'>r?'i 9 2) o ^ji£:-r^5"^r 

T, ^m^n^ 2 9 9 tClE^-rS 1 9 7) o 

2 (T^^MP r o V e r , , y h Hlmm^L ^iz y h 

-r-S (X-7^*>:/193) . Prove rjCD-fe^yhfrcfc 20 

[00 87] 7.y^yZfl 9 3 T&^llfT $ tlfc 6 , T.y^y'f 

1 9 4 ^^fr-r-S- ^ 3 (^MI§yD h 

y^l 9 4 <7>l¥iSffl;^ci:^]Ii^Ig|2 3 tC^-To ISSEft^^J^ 
BP2 9 6 T^-V 1^>>^X ^^;5iKLT, ^ 2 <D|g|Eit^^ 
!^0{5 2 9 8 tCfS^T-S (Xxy7'2 3 1 ) o % (i, 

^ T?^ b ;t (^^lE§0ii tc 43 tj- s c <7> ^ fiK t II i; :^ ^ -e 

mm-r^ <.7.^y^2 32)0 

[0 0 8 8 ] :KiE§g3 ti, % ^^ftgl$2 8 2 TS^f U 30 
T, jt^^l^HR 2 8 9 tCga^fS 6 3) o 

L . - x-h bT-0 ^-^fl UTt^-'grJi , ^IiEBJ§§ 2 7i<^.<>- . . 
y V^^'dX\^^U<X. R ibr 0 ^i^^;tc:i:^,^^ 
■rs(DT, r&^j ^m.^'^^^'h^^-h^2Z 1 2t^ 

284tC43tiTUX3j^>Xp^, 
[ 0 0 8 9 ] 
[fel 4] 

p \ — mod 

(Cct 13 ti-^r-S 6 4) . tf^LTcp^i^m 40 

^2 8 1 J; Kim.mm2^m\ft^ 6 5) o 

[ 0 0 9 0 ] 2 p ti^mm 292 x^m l 
X. mmi^m^2 9 9 \zt^mr^ (xt-u/ :/2 3 3 ) » 

m2 (DmM^2 9 4X 
[ 0 0 9 1 ] 

mi s] 

/O : = p ' mod 

^ itn^-^^-.—f^^^!^M it ifi ^ mM-2--9 siz^m^nx 
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vMtc 1 ^is:^bT, If ig^j^gi5 2 9 9 tcie^-rs (X 

T^^y 2 3 9 ) o ^iJ^cD^mi: bT-ife-r^^^(Ct^, 
MfC0^^3^bT, if $g^j^^2 9 9 (Cia^LT 
:yy2 3 5 ) , P^^^m^W^l 2 4<Dm2<Di^^mm 

^ws^\zm^^tix^^^t3 0 >^ i .(om^^ >^ 0 

> hT^ (T.y'yyz 3 6) . ;^ x t; 2 3 6 t> b < 
Xt'7:/2 3 9-f)mn^tlft<b. i . L J; 0^#e> 

n;t±PSM i tit^t^ i7.^yf2 3 7) • 7.=rv^ 
2 3 7 <D«:es<D^^i: LT. i , (^M;5« i J[i^TcOJ^^ 
Ji. ^ 1 cr)?tmg!5 2 9 3 t'R:=(C||M)'* mo 
dn^th^bT, If ^^Jtgf5 2 9 9 tClE^-r^ (Xt^^^ 
7^2 3 8 ) o 7^2 3 7 0itgiE(^iJ§^<hbT. :^ ^ 

4cfc?) i .(DfSlt^^^^MbT (X5^*;/y2 3 1 

0 ) . ^^y Y^nm 1 2 1 75^6 t €:gmbT (X5^y 
7^2 3 1 1 ) , R(DM& 1 td^^^LTlf IS^J^gP2 9 9 
iClH^-r^ (X^*yy23 12), Z.Z. ^Xt)^. m3 0:> 
Mp-fO Nn;Kc:fettSX7^ty 7^1 9 4 (D^mtJi^mx 

[ 0 0 9 2 ] :r^i5, ±<;Dis£ig-c(i i ^i^mmm o tc^^ 

^ti/iimti. ^m\z^p3ir^m\z-f >^ U :^>.hLX i 
t:k^\^^it^hXl^^f}^. i i fc^^L 

^i^^^i^'r^:^^xhmm(Dz.t:^mmx^^. 

[ 0 0 9 3 ] Xf^-y 7^ 1 9 4 75^^ff ^ n;'^'^, X5^y 7" 

1 9 3-C-fe:y t . P rover,, L^^I^T 
s {T^-ry :f 1 9 5) . x-7^»;/:/i95 t)l^<*ix^7 

:/i 9 ifi^mff^ntzib. mmm2 9 1 Tj^e^sEgg 3 

R ^^iWr^ i^T-y-^l 9 6) • 

[ 0 0 9 4] :^SiEii3 \t. iE B^H 2 ^ 6 i^lft $ nfc R ^ 
SmifP 2 8 2 fC^ftUT. mm^t^^ 2 8 9 tCfS^fS 
(X^y T'l 6 6) • R : =RV,.mo.d.. n^m 1<D. 

mn^2 B zxm^-r^ (X5="yyi67) . cKDtfg: 
^^<D±i^L<Dmi!)^. ^mm^^i^m2 s 7 {ztEm^nx 

y^^C t-m-r^f)^^. iE^t^^^IiE^ 2 8 5 -CW^r^ 
(XT^tvT^l 6 8) , -m'r^^'^\t.wLmm2i)^^1^is. 
"f-try h^n-^X^^^^Ztt^Tjk^ntcOXs R(OTi±(0 

bTlXOEBLT (X7^tyyi69) . ^f3m>2 B \ 2i)^ 

em:^-r^o -mhu\^'^^'^\t,Kmm2t^mm^^^y 

^ti!,ti%ihtim2 8 1 2/)^i^mtir^. 
[ 0 0 9 5 ] i.:k±f)^m3 co^f§:/D h 

>^ p tLxmmum^mfc tx. ^dry h<D^^j}^ 
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[ 0 0 9 6 ] [^4] 

C rand 
8«ad fi) 
receive x 
pt== mod M 
send p 
receWe R 
R:~R^modn 
if R^C\\M 

output M 
else 

output * H^W 



Prover 

X rand 
send X 
receive p 
p:^ fiF mod v 

itp^X 

in + ! 

Af ;=0 
else 

Af:=l 

R :^ {C\\M)^ modn 
elae 
free in 
delete t 

Ri^l 

[ 0 0 9 7 ] C2. 6. f^4 (DMsBzfa hnji^] 

m^m^mrj:^^^m<D^tr y h. mis. mi 9. 

0 2 4) ^4 0^|§7'n ^ 3 <^3!rtiS:/a K 

a. 

[ 0 0 9 8 ] CCDzfa h^Jl^'C\t^mm3fj^^M.m^2 



40 -So 

[ 0 0 9 9 ] CntCct t?T5^^u/ hCO^fr^^^r^y hf^ 

[0 10 0] ^liEii 3 O^-tf ^i^iiE-r ^4#^^$Sco 
(6. v) :focfcDJi>^1f fficO. ( £ . v) , ^^y\-m^ 

H zi juco:^giE§i 3 c^^jni^ia 1 6 tc^^eo TiftB^ 



50 
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2 8 1 3 ^0 xtj^nx. Aiimm^^u 2 s i i (cih 
[0101] ^iEH 3 \tmm.mm^f^m2 s e x^-^ u 

>z^Ct:±^Lr. igfUf ^^J^g[5 2 8 7 (ClS^r^ 
C^-ry :/ 1 6 1) . ^iEU**:^ i:-re^^-;/ h^^iasij 

ch^fi^L;^ C ^, * <h Ji) T iSI ft 2 8 1 <i: 0 liE ?g 
2 ^jMdf^ (Xx-y :/l 6 2) . 

[0102] iEm^2\t. feSEII3;5^e>iSft^nfc II 
(C. n) ^^mU 2 9 2 X^mLX. ^^^.^^29 

9 ^zmm-r^ ix^^yi 9 d . ^y-/ h^^^i 2 

2 f^Sfib^c n {C^tif£:-r^^^r.^ K^^^r h^^^Spgp 1 
2 Ifi^i^mLX. h ^t^-:>X\^^^^^^vfJ^^n^ 

m^\z}t. i/x4t>;^R(c 0 <£ig;£LT, mm^wm2 

9 9 fcSa^-r^ >^ 1 9 7) . Mj£;-r5^^*;/ h 

^)^^m^^z\t. ^tryht. m.m^2 (ommF r o V 

e r,, h f^tummL y hT^ (Tsy^y^l 

9 3 ) o 20 
[0103] AT-y-:/! 9 3 f)^^n ^ tlfz 6 , T.'ry^ 
1 9 4 ^r^fr-r^o ^4 cDMisyp hiiJUristt^;^^^ 

y ^1 9 4oi^^/ct^ji®^0 2 4^c^^e•pTi^£gg■r'5. ^ 

lEif ^^^t!ciSP 2 9 6 lx>v?% Sr^fi^LT. ^20 

^iiEft^^l^glS 2 98 {c:iSS^-r^ (;^T'u/::^24 1) , 
^fiKL;^ % *iilftBI5 2 9 1 :f5ie>^Eig3 'vMff-r^ 
•r- 7" 2 4 2 ) o 

[ 0 1 0 4 ] :^iE§l3 (1, X ^Smee 2 8 2 TSdL 
T, '1t$S^J^S5 2 89 (CHaii-r^ (7.^iy:7^163) • 
z ^ LT 0 S:S(t SE?^§§ 2 u/ h ^^^^ 30 

•^TM;^j:<T, R <h LT 0 <!:^.^5^-r'5(^ 
Jfv.. JM^ifJ ^lc*'r'5tB:^^ai:/3fIS 2 8 1 2 7&i6ffl;^ 

^rtf^TS (Xx^^T'l 6 4) c ^-r. 'm2<n^%^2 
84tC^liTU;^4^>7;/oi£. 

[0105] 

[^16] 

p \ — mod u 

\z^o\zmw-r^. ^^y h<Dmw^<D^^^n^^rz^^i^ 

^\Z\t-^ib\Z. m2(Dimtg^2 8 4(C:fcl/iT, 40 
[0106] 
[^17] 

p \ — mcd u 

^ffSf^o XT^ty y 1 6 4 IC*5tt^ P Oti-^fi, 
y h <Dm.Wi<Dmn^n\^^ft^^^^\Z\t li : = l <!: tX, 

T, 

[4)U-D. 7 ] ~ . 

[^18] 

p \ = X^^ mod 1/ 50 
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LTt)|^^-e$>S. Xr-'y 7^1 6 4-Cfhff b>t p 
^i^{fei5 2 8 1 J:OE0J^2'N32imt-^ (X7^y:/16 
5) 0 

[0 I 0 B] mmm2\t. 0^^mw^2 9 2x^mh 

X. ft $S^J#gP2 9 9 \ZBm'r^ {T.T-y'f 2 A 3) » 

^ 2 coii|g:g5 2 9 4 t 

[0109] 
[fS:l 9] 

p : — p^ mod 
^ff-#UT, ^2 cD^iiEit^^i^g^2 9 8 {cia^^nx 

4) . Xt-'> :/2 4 4 (DflJ;^Of^^;!>t — ife-r^^i^tC 
ti. Mf::0 ^|g;£UTlf ®^|tgl5 2 9 9 (ClH^bT, n 
U^m^^^^l 12 4 (C5i«$nTli^;^7 »:7>:$' i , (DM 
^SrO^J^Up^Vh-r^ (X>u/:/2 4 5) « y^'r y Zf 2 

A 4<D^\\^(Dmw:f)^-wchu\,^m'^\z\^. 'm2<Dm.wm 

2 9 4 T 
[0110] 
[^2 0] 

p : = p^ mod V 

^ft^bT. ^2 CDlgSEff ^^I^g52 9 8 fClB^^tlT 

8) . 7.^yy2 4 8(Dm^<D^m^^~'m'r^m^\z 

\t. M\ZO ^lk^l.Xmm^^^^ 2 9 9 tCgB^UT, 

mikm^wmi 2 4 (om 2 (Dp^^ikm^^B^zm^-^ ti 

X\^^^:^^ >^ i ,<Dm^ 0 ^Z^^T^ (7.^y^24 

9) • :^T-yy2 4 &<Dn^<Di^m^^-mi^f3i^^m^\z 

\t. ;< y-ir-i^MfC 1 ^^;^LT, -if^^H^i^ 2 9 9 (C 
ga^-rs (Xx'yy2411) . X5=':yy245'£)L< 
tSX5^yy2 4 9, Xr-y :/2 4 1 1 TJ^Hfr^n/t 
i • coM^Lct Oft en;t:±RgM 1 iith^-rs (X^^y 
7^2 4 7).,,.Xt:!V_>^2 4 7 <D it« CO i^:^ <h b T . . i . 
C0M?&« 1 l^T<Dm^\t. m 1 (0^11^^ 2 9 3 TR : = 
(CI I M) " mod n^fi-SCbT. mmUt^^2 
9 9 iZ^mr^ (7.^yZf2 4 8) . T.v-y'f 2 41 (n 
)t^(r>m^t\^X. fi^y^ i.t^ \ ^K^'h^^^^^^^ 
\t. RCOM^£ 1 {C^^bTWIS^J^^2 9 9 (CfH^f -5 
(Xxry >^2 4 1 0 ) • Z^Z^^Xt^m 4 (Dn^^ U S3 
^KriSttSXT";/ y 1 9 4 (OPM^^C^WIT^^o 
[0111]X5^!y:/l9 4i^W\=x'^nft^. TsT-yZf 
1 9 3 T-fc: S $n/^ t . Prover,, L^^^l" 
^ (Xx^/yi95) • X7^-/7'l95t)b< fSXT--y 
:/l 9 7;^<||fT$n;t iifia5 2 9 1 ;!i^<b«^SEgg3'\ 
R^iiff-rs (Xt^-:/ y 1 9 6) o 

[0 112] :^IEi§3t^, iE?gg§ 2 ^»ii(t ^n/cR ^ 

^msii 2 8 2 (i^ff br, mn.^wu2%9\z^mt^ 

(X7^y7'l66).R:=R' mod n^r^lCO 
iSI^^ 2 8 3 Tft-^-r-S {Ts^ry^l^l) 

^J^o±i40^fT/^^ ggSiEf^/fs^*#gi!2 8 7 tcisa^^^nr 

C i-St-T'S;)^^. iE^i4^feiiEg&2 8 5 r^J^T-S 
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31 32 
(T.T^^^P'l 6 8) , -m'r^m'^\tK^M^2^^^^^tj: X. i .OWmm^ i T.f^y-f 2 A bX^ 

LTlJcOtiiLT (7.7^ 7^1 69) , tii;tJ^Fl$28 12 75^ SSJ^i^jTti. X7=-u/:7'2 4 ^ <DmWL<D%m,m\Z i.^ i 

^ffil^^-r-So -ab7^tViii^fiiE5g§i2 75ft^^g{f;k^y y (C^:£-rS. $ ^ (CgiJ ^ L T. 7. ^ ^> 7^ 2 4 9 

[0113] Uhi)mAo:>^M-:fu hn)VX^^. m^^ [^5] 

C := r*nd 
Bend (C,n) 
receive x 

send p 

receive R 

R modn 

output M 

else 

output ' 



Provcr 
H|e||<;=X 
X rand 

Bend ;t - ^ . - 

receive p 
p := f^moAv 

else 

pi:=: mod 1/ 
if^ = X 

Af :=0 
else 

ifxn<i 

else 

:= 1 
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[0115] [2. 7 , mS(Dnm^a h^)\^] 

(7.^ >^ti—}^m^<ry mi 7 . mi9s m2 

[0 116] ^fz. ~^mrji^mm\zMLXt^^y h 

[0 117] mm^s<D^m^^m'r^^m^m<D 

((5. v) ^J:ZS'j:i:mmn<0 V) , ^iryhm^ 

[0 118] ^m^sit. mmmm^^st^z s 6X9-^ 

{7.^y^l 7 1) . ^mV^O t-r^9-^y 

2^mm-r^ (x5=-y:/i7 2) . 

[0 119] m^^2\t. mm^3f}^^mm^nft 

(c. n) ^^mm2 9 2 x^mi.x. m^^i^w^2 9 

9 (ClB^rs (X-7^'>y 1 9 1 ) o ^^y hm^m 1 2 
2 f^^fiUfen (c;*:tf£:'rs^^r y h^&^^r-/h^J#gRl 
.2 lf)^'bmhX. ^^y h^^^X^^^f)^i£vf!}^^n^ 
(T.y'yy I 9 2) , M^^-r^^^y h^t^ftf3ii^> 

9 9 (CiE^-rS 1 9 7) • Mft^ir^^^y h 

^^-om-^lZlt. ^^yht. SEHJfg 2 <D#JiP r o V 
e r,. "f-try h f^tiDlf ^ L ^£ ir H 1" S 7" 1 

9 3). 

[01-20] :^5^y.':/l 9 3f)^^t=f^nftiE>.. 7.7- y-^ 
19 4 i&^ff-rSo m 5 CD^^T'D V^)V\Z^n^7.'f' 

y 9 4 oi^$ffl;:c^iiii^i§i2 5 (c^r- issEitia^fiK 

S5 2 9 6 U>i^X ^±fifebT. m2<?D^iElt^^ 

2 9 8 iCfB^t"^ (7.5^y :/2 5 1 ) o ^J5)cL./t x 
^i^{t^2 9 1 ;5^e^liE§i3'\ii(ir§ (X7^-/y25 
2) o 

[0121] ^lEig 3 X ^^m® 2 8 2 X^m L 
If $S^f#gl$ 2 8 9 \ZlZm-r^ {7^y^ I 7 Z) • 
X <h bT 0 ^^{f bfcii-^fi, mm^2i)^9-^y 

-dx^^ukx. r tLx 0 ^m-Dftc t^M^-r^o) 
X. rmitb} t:M^r^ti!,tj^mtim2 s i 2f}^i=>ihtt 

LxT, ^tlgyn hn^U^&i^T-rSo ^ 2 2 8 4 

[0122] 
[^21] 

p I = mod u 

\Z^^\zmn-t^ {T.'ryZf 1 7 4) o ft^b/lp ^i^ 
ftgll2 8 1 0 HiEBJgg 2 'Njgm-rS {7^y:f\ 7 
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5) o 

[ 0 1 2 3 ] ffiEB^ig 2 ti, p ^SfI§B 2 9 2 TS{f b 
X. ^m^^U 2 9 9 iClH^f'S (;^T-y :/2 5 3 ) . 
^2cDmii:^2 9 4 T 

[01241 

[^2 2] 

p \ ^ p'^ mod 

^li-gtLT, ^2 (^iSIElf ^^J$615 2 9 8 {ZlB^^nr 

10 4) • XT^^y y 2 5 4 CDfij;^(Oi^^75^-§c-rsii^(C 
tS, F^eP4^li^^^^ 1 2 4 CD^ 2 <Dl^g|5tfe^^J^g|5tC5i 

^'^nx\*^^'n^>^ i n<Dm^^ >^ V ^ > h-t^ 

(X5^yy255) . ;^7^yy254 <Dnm<omMf)^- 

mhtsi\,^m^hL<\t7y'y'/ 2 5 s i^^mn ^ tift . 
p^m^m^i^^i 2 4 (cci^stiTiis i.<^MiL«t 

Off en;t±[SM i ^^it^rs (7y^y:f2 5 6 ) , 
:/2 5 6 (Oit^<D^MthX. i ,t i 7&«^U< 
^1 (Oi^#gi5 2 93'rR:=C'' mod 
n^fh^UT. if $g^i^^2 9 9 (ClB^-rs (7.9-y 
20 r^2 5 7) , J^-f :/2 5 6 COM:^COi^^i:UT, i, 
<h i 7&«^Lti^^(i, i.^OfClSitLT (>^5^tyy2 
5 8 ) , ^ 1 OiH^eP 2 9 3 -Z? 
[0125] 
[1^23] 

R : = C ^ mod n 

^ff-^UT. If ^^l^gP2 9 9 (CfB^-rS (7.5^yy2 
5 10). CC^Xf)^m5 CD^fgya h 3;l.tCi5tt'5;^ 

30 [0126];^7^>y:/l94 r^f^l^fr^nfc ^> , T.y'yf 
1 9 3X±:y h^tlft t . Prover,, L^i^^T 
S . C^^-r I 9 5), . ^T-y:/ I 9 5.t) fi;^7=->y 

rT'i 9 7 /f^^rf^tifz^. mmm2 9 1 tt^^^^wt^s-^ 

R^iiftrs C^T^'y ^l 9 6) o 

[ 0 1 2 7 ] eiEtl 3 ti, IiEa^l§2;5ie3^{t^^;tR^£ 
^{fgf; 2 8 2 fcSft bX, if ^^}#gR2 8 9 tClB^-rS 

(X-5^u/7'176)oR:=R' mod n^^io? 
2 8 3 -Ctf^LTft$S'^J^glS 2 9 9 fCfS^-T^t 
<ht)(C, C(Dti-gtj^:^;5^ ggillEif ^^Jt^fU 2 8 7 (CgSii^ 
40 ^nxV^S C <*:-§C-rS75^^, lE^ii^iiE^ 2 8 5 T^yj 
^■rs (X^^-yyi 7 7) o -ifef^JSi^ti. 0^ai:'J 
gi5 2 8 1 2 /)^^mtt^. -ifeb/cCV^ig-^J^, R : =r 
' mod n $m 1 (D?|^^g|$ 2 8 3 ^(Cfh^LT 
tf $S^^aP 2 9 9 *CfS^f -5 ti: ^(^tf^lS^ 

/)^. ^Mmm^^m 2 8 7 {ztEmi^nxi^^c^-mr 
^f)^^. iE^^^mm2 8 sxn^-t^ {^^y/i 7 
8) • Ts^yzfi 7 8 (D^^-h^—^-t ^m'^^t. m.m^ 
2<D^^y hi)m^ (Dm-mz mi^ ft c t f-O X . 1 

^lht}m2 8 1 2;i^^t±i:^-rs. 7.T--y::^l 7 8<D^$m 
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[0128] )^±^<m 5 (DM^ya hn^l/T^^^o [0129] 

C := rand 
send {Ct n) 
receive x 
p := X* niod 1/ 
send p 
receive R 
J2 :=i Jl^ mod n 
ifC = -R 

output 1 
else 

Jl:=JJ^modn 

output 2 
else 
output 'iSlSS* 



Prover 

Hkl|i:-ii 

X ~ rand 
s^id X 
receive /? 

ifp = X 
1^ := <^ + 1 

else 

iJ := mod n 

in 0 
else 

R := mod n 

[0130] [2. 8. ^ 6 co^ijyn h 3 JU] 
19, 1212 6) CC^^^tCiS^t^^ 6 (D^l§:/D K zi;u 
1 1 ^ n ;t §2 It ^ ^ 4^ t c ^ $ n ^ fl ^ f i ;^ M 1 1 ^ il> -r 

^. 50 



[0131] -^6^;^«^£E#(C^UT=t)5^^!y hcoW^ 
[0 132] CKD^IgyD hzi;U-C(i, ^iE§&3;5i6pJ 
[0133] ^Htg 3 cOit#*i^^giE-r^^^iS:1t$SO 
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L{z\t^\z i \t^t^»^'^^^^t^i,^. me (DM^zfa 

(c ^n^*n^^ t> T Si Bj -r ^ , 
[0134] «isEii 3 \t. mmmm^^^ 2 s e-v^^ 

(7.y^y':fl 8 1) • hT^^^y hCD^giJ 

^n<h^^L;tC^, ^ tibxmm^ 2 8 I ^ 0 
2^mmT^ (T.T-yZ^l 8 2) . 

CO 1 3 5] iEajig2fi, i^m^3^^iE>mmi^ntc 

(C, n) ^SmBP 2 9 2 T^ftLT, 1f^^^eiJ29 

9 tcia^-r^ (z-T^^y :/i 9 1 ) . hmmW' 1 2 

<::^7^iyyi 9 2) . ^^^TS^'^ry h $ j^/^/j: 
^^(Cfi. U;^7)^>XRtC 0 ^IS^bT, If ii^}^gP2 
9 9 (ClB^-r^ 7" 1 9 7 ) • M^^-r^^^y h 

^Ito^i^fCti, ^<5r h t , lEH^fg 2 CO^JIISP r o V 

9 3). 

C0136]X7"y:/l9 3:^>^^fT^n;t 7.^y^ 
1 9 4 ^Hfr-r^o ^6 d^n^^U Vu)V\Z^Vf^7sJ' 

lEft^^^tJcgB 2 9 6 T^-^- U>ix X ^^fifeUT, ^20 
^liEm^^J^gU 2 9 8 tCga^-r-S :/2 6 1 ) . 

^i5£L>t % ^m%^2 9 1 75^^:^ii£§g3-\i^ff-r'5 
-7" y 7" 2 6 2 ) , 

[ 0 1 3 7 ] ^iiE§g3 fi, X ^^(1^2 8 2 -C^fiL 
T, 1f$S^f^gK2 8 9 fClB^f -5 (Xr-y y 1 8 3) . 
z t LT 0 ^^ftUfc^i^ti, U,'s^n^2ii^^*rvV^W 

t?v r^^J _*.l:^.r_-5ffi:^^ffi:^J|5 2 8 i 2t\^)^'h 
LT, ^K^D h3;i/$j^Tf Xti^2 8 1 3 JcO 
A:^ ^nxA^ft^^JteU 2 8 11 \z^\^um-^t\X\^^ 
tz^v^L-V iL^^^X. m2(r>^%U2 8 A\Z^\.^X 

[0138] 

[ic2 4] 

X5 : = (a: I I mod u 

^i^mgl5 2 8 1 ^O.IEBJi§2 'vjUftT'S (A^Fy^iS 
5) . 

C 0 1 3 9 ] iiEB>g||2 (i, p S:^fi^2 9 2 T^ftb 
T, mm.^^m 2 9 9 (ClB^f ^ (A5^'> :/2 6 3 ) o 
m 2 (75?1l^gP 2 9 4 T 

[0140] 

[^2 5] 

p : =^ p* mod 
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6 4) p m 2 CD|g|Efifg^J$a52 9 8 (CHS^^mxVi^ 

(^^^^265) • XT-^>y265 CD*iJ^<7)ie:^;5^ — 
gtb;5:^^^i^fc:ti, rtS^t^H^^gp l 2 4 (^P*9gp*^li^ 

'y-fe-vi LTM : = 1 1 | i . ^fg^LT, -ft ^^fir 
615 2 9 9 tC§5^-r^ (X5"-yy26 13), T.'r v 2 
6 5 (D^ij^tco*^:^?^^-!^^ ^JSi^fCfi, p(DT^CDfiT;5i 

10 mn-t^ (A5^yy265) . M:=0 I ( i. 
UT, ft ^^^^S^5 2 9 9 (ClB^f ^ (A5^-/::^2 6 

7) . i . 0 <i: 0 ^id^^^fi^T-S i.7.'rv^2^ 

8) o OcfcO/h^li^^tCti, rteU4^^^l#e[S 1 2 4^^ 
e. i . bT (.7.v-V^ 2 % 1 \ ) . V 

^ \ 2\tf^i^ \, ^^rjj^t*^ (A5"iy :/2 6 1 2) . Vi-f 
ncDii^Tt), ^1 (^tllg:ei5 2 9 3 TR : = (CI I 
M) " mod n ^ff-^bT, If ^^IfSP 2 9 9 frlB 
m-t^ {T.'ryZf 2 e 9) . Z.:i^Xf)me (D^M^u 

h:n)v\z^n^7sv^y:f I 9 ^ (owmts.^mx^^ . 

20 [0141]X'7^yyi9 At^^n^tifti^. Xv'yrf 
1 9 3 T-fe:-/ h ^tlfc t , Prover., L ^^RJfT 
(X5^iyyi95) . A7^yyi95t>b< ti A5=-iy 
y 1 9 7;!i^^fT^nfc e., i2lft6P2 9 1 ^^e.^IiEg§3^ 
R^£rji(it-'5 (A5^yyi 9 6). 
[0142] ^iiEf§3 fi. IiE0JI§2;5ie2lft$n;tRS: 
g{t^2 8 2 tC^ftUT, ^n^nU2 8 S\Z^mt^ 
(AT-yyi86) o R:=R' mod n^^KD 

2 8 z x^wi.xmmL%nw^2 9 9 tcgB^re 

(A7=-^y 7^1 8 7) o c:<^ff'^i^:^co±ia:<75^fT;&^, IgiE 
30 If IS^i^gP 2 8 7(c:|2£^$nTli'5C t -ife f 5 75^ ^ . 
iE^14^iiE6R2 8 5 T^I^Jj^-r^ (A5^y7^188) . - 
. Wi-t.^M ^ .15-. R CO T ^ fff 75^ e M 0 i±i- L T ( X 7" 
•>:/i 89) , m;fjg[i28 1 2f)^^\i^ii-t^. -WnVti. 

[0 14 3] U±:^^me (DMs&^a h::iJ\^X^^. i^m 

X. ^<DT(Dmxti^>^ i . OM^5ilST^-5. 

^^f^M^g^-ien-So {^jAts:. ^^y h^wmit-r^n 
f'j^-r^iitc, ^m^tt^ >^fi^ibW,ut^^o\z:i^':/ 

[0144] 
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C ;= rand 
send (C7,n} 
receive x 
P ~ (xllA')'raodi/ 
send p 
receive R 
R:= R^modn 
ifii = C7||M 

output Af 
eLse 

output ' 



Prover 
;^ :— riTid 
send X 
receive p 

mod V 

»n := »n - p 

A/:=0||in 
free tn 

delete t . 

else 

- M := 

i2:= CC||M)^modn 

[0145] [2. 9. m7 (Onmzfu h^J]^! 
8, 12119, (327) C:(D%B.g(C*3tj-'5^7 0^fg:/P 

c 0 1 4 6] m6<Dt^m:fu hzDi^tmm^z. 

[0 14 7] COMm-fa hzij\.v\t. «liEgg3^e^ 

CO 1 4 8] z (D^m^^m-t ^^WLmmcD 



Mi-fuhzijvo^m^scD^m^mia^z. mm^2<D 
^m^mi 9 \z^n^ti^-:>Tm,mr^. 

[0 14 9] :KiE§i3 tS, IS IiE if ^ ^ fi£ §15 2 8 6 T^V 
40 U>>^C^^^LT, iSSEltlS^JtgfS 2 8 7 IClBSir^. 
C^T-ivT'l 8 1) a ^lilLcfcO (h-r-S^^^ry hCD^j?iJ 
<J:^fi)cbfcC ^<i:*6TiMft^2 8 1 J:OliEBJSf 
2 ^mmt^ y 1 8 2) o 

[0150] gEBjfg 2 ti, eiiiE§f 3 f)^ibskm^tlft 
(C. n) ^^ffgR 2 9 2 TSffbT. if$g^ftg[i29 

9 {z^mt^ (;^x'yyi 9 1) , y hmm^ 1 2 

2 ti^ft L^d n (zMfS-r^^^u/ K ^^^'V 1 
-2-1 -Ei^ilLT. y h^f^'DX^^^/)'^^ o'fj^ ^ ^Jsij^ 

(X-r'>yi 9 2) . ^^fiCf'S^^r )-^mftfJ:\^^ 
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9 9 tCgB^-r^ (Xt">:/1 9 7) . M^-r^^^dry h 

^n-^m-^iz^t. h t. mm^2<D^mp r o v 

9 3) 0 

mm,m^^nm2 9 s tcis^-rs (7;t-'>7'2 7 1 ) • 

^y^2 1 2 ) . 

[ 0 1 5 2 ] ^IiE§g 3 ti, X ^:S(i^2 8 2-eS{tL 
T. 1f^^J^0P 2 8 9 tClBS^-rs <X-7^-/:/l 8 3 ) . 

LT, ^IS >^D S n;uSr$^Tf 5o A:tr^28l3J;0 
A:fj^nTA^jf ^^l^g|5 2 8 1 1 fC^ii>IB^^nTti 
yfe->?M S:<^oT, ^ 2 CDO^^gR 2 8 4 Ir *5 t.^T 
[0153] 
C^2 6] 

P : = (;t I I mod 

£i^(t$l5 2 8 1 cfc OIiE0>^S§2^igfi'r^ (Xx'y^lS 
5) , 

C 0 1 5 4 ] iE^gg 2 li, p $S(tgB2 9 2 rSmU 

mm^^nui 9 9 fcE^-rs 7^2 7 3 ) , 

^2(73ill^gU 2 9 4-r 
[0155] 
[^27] 

p \ — mod 

SffSLUT. mn%^m 2 9 9 (Cf2^-r«>..(X7^^y 7^2 - 
7 4) . ^2CO^IElt$S^lt^2 9 SfClB^^nTl^-S 

(Xxy:/275),X7^!yy275 <Dn^(Dm^i)^- 
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§tL;^ctVi^i^(::tS, i^^tfe^SJ^^ l 2 4 com 2 c^rtHS 

;< ^y-t:->^<h LTM : - 1 | | i.Srlg^LT, ft 
^^J^S15 2 99 (ZiB^t*S (X-T-yy2 7l2) . Xt^ 
y 2 7 5 OJi^Jj^<0iem;:?^-®r-r^i^^(Cfi. P<DT^ 
Offi;)^exi ^^OmixT. i . CDM^ i . : = i . - x/.CO 
cfc^tC^ffrs (:^x*>7'275) . M:=0 I I i. 
^WL^l^X. if S^l^^2 -9 9 fCfE^f -5 (7.T-ry:/2 
7 7). i„;<>^0 J:0/h^Vi75^^ii;^'rs (X7^^y:/2 7 
10 8) o 0 cfc 0 /h^ Vi^iB'fCf^, i.^Otr^^f^ <7i 

"fv^zi 1 1) . t^i-rnt^ii^-cfe, ^ic>?a»BU2 

93TR:=(C||M)'' mod n ^tf^UT, 
If $S^J^g52 9 9 fClBi^-r^ (X5"u/>^2 7 9 ) • C d 
7 (Dn^-ifu h:D;utc43frts;^7^^:/:/l 9 4(^ 

[0156] TsJ-y-fX^ 4f)^m^^tltci^. Xy^yz/ 
1 9 3 T-fey h $nfc t , Prover,, L &^f^r 
^ (;:^5^yyi9 5) o X-T-'>7'19 5*)b<tiX5"-/ 
y 1 9 7 7!)^^fT^n/i:6, jilfi^[5 2 9 lf)^^i^M^3^ 
20 R^ii^t-rs :/l 9 6) . 

[0 15 7] :^IiEg§3(i, M^^^ 2 f)^ ^ ^ tifc R ^ 
S^tSB 2 8 2 tCSftLT, ft ^^1^^ 2 8 9 firia^-r-S 

(;^v^';;:/l 8 6) o R : =R' mod n^^KO 
mi^W^ 2 8 3 Tfh^LTlt^^^tgU 2 9 9 \Z^mT ^ 

iXy'yy 1 8 7) , C CD ff ^ :^ O ± & <^ ^fr ISSE 
ft ^^J^^ 2 8 7 (ClB^^nxi^^ C <i:-ife-r'5;&>^£, 
IE^f4^iiEg|52 8 SXm^T^ C^y'yyi 8 8) « ~ 

*>7'189),£ti:^Sl5281 2 76^^tB:^'r — 
30 lii©-S-ti, r^S*J *lc5fe*r5m;f3^m;f7gl5 2 8 1 2 ;5^ 

[ 0 1 5 8 3 ^^A±7)«^7 O^^yp h.n;i.:C*So - - 

[0159] 

[Il8] 
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(7 := rand 
send (CyTi) 
receive x 

send p 
receive R 
Jt := RPmodn 
ifiZ= C||M 

output Jl^ 
else 

output 
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Prover 
u\\e:=L 
X := rand 
send X 
receive p 
pi^pFvciodi/ 

in := *n - A« 

ifln<0 

itv := 0 

else 

M := l||in 
ie:= (C7||M)^modn 

[0160] [2. 1 0. ^SCD^^T'P Nr3;H 

Ell 9, I2I24) ^<D^m\z^\^^w>s(Dnmzfu\^zi 

[0 16 1] ^iEg|3<7)4^^i^{^IEf ^.4$^^f$SC0 
((5. v) *3^0:^^1SSCD (£. v) , ?^:yh*il^ 
ffifSL 3 <D^I§ya h 1;t^^„ ^8(73^ 

i§:/D hliJKO^IEggSO^jlti^lgll 6(C, iiEH^gg20 

¥Mi^£(2ii 9 tc-en-?--nti£oT©£B^-r^. tzitx^. 

(r>mm\\L^'%m:^ yb.(Dt^^ s ^mtff'S C0XtigP2 8 13 
ci: 0 A:':^ tiT. A:^1tfil^l^a5 2 8 1 1 lzl2^$nr 



[0162] ^iiEg§3 \t. mm.mmL±j^m2 s s -c^^i- 

VvvC^^^LT, ISiiElf ia^i#^fl5 2 8 7 tClS^TS 
1 6 1 ) . g^IEbcJ;:^ <h-r-5^<>-ty hcoigggij 

^nt±fi£L/tC^, ^<i:i6Till{tl[P2 8 1 J:OIEBJ|g 

2'si^lif ^ (;^7"'yyi 6 2) o 
[0 16 3] IEBJ§§2(i. «IIEg§3 75>6illfi$nfc 
(C, n) ^^iil;P2 9 2 "C^ff UT. 1f$S^ffg^2 9 

9(CI5I^1-^ (;^7^';/:/19 1) . 5^^r-/K^^gf512 

2 1 ;5^^^bT. J-'r V V^n':>X\^^^t^^ot^^%\\'^ 
-t^ (7.x y^l 9 2) . ^f^-r^^^r h^|^;t:;il.^ 
^^\Z\ts U7.4^>XR*C 0 ^iS^^bT, 1tfS^I#g|i2 
9 9 (CHB^T S (Xt" y 1 9 7 ) . Mp^-T ^?^r h 
h t , IE0>^gS 2 c?D^lilP r o v 



(2^ 

45 

9 3). 

19 4 ^llfrT^c m 8 (DMm-yxi h3 JUtc^Stt-SX^" 

SEif ^^fEfeg5 2 9 6 Tf^l- U>>^ X^^fiScUT, ^20 
^iEff ^^J^SB 2 9 8 \ZBm'r^ (7.5^yy 2 4 1) . 
^^Lftx ^miE^2 9 1 75^6^ItE§l 3 'Si^mi-'S (X 
7" y 2 4 2 ) o 

C 0 1 6 5] ^liE^S (i, X^^mm2 8 2 
T, ffi^J^SB 2 8 9 tCf2^"rs (;^5Fy:/163)„ 10 

-e, r^^j ^lci*r^Hi:^^m:^SIJ 2 8 1 2 7!i^^,£li;^ 

r^m'^\Z\tu:=2tl.X. u<om^Xi:3^2 S 1 3 
<t 0-^^TA;^ff ^^if ^2 8 1 1 tC|E^bT:fo#. ^ 
2 <75^IISLa5 2 8 4 tC^St^iT, 
[0166] 

C^28] 20 

p : = j^^ " mod 1/ 

t UTP;^7}?>;^ p ^It^-r^ (X7^^>yi64) . If- 
^i^rzp^mmm2 s ij:omm^2^mm-r^ (t.^- 

C0167] mBM^2\t. p ^^mm 292 x^mL 

X. m^^t^m 2 9 9 \Z^mT^ {y^y^y-f2 4 3) . 
m2<Dm,W-m2 9 4T 

[0168] 

[i!&2 9] 

p \ ^ mod V 30 

$:fh^bT, ^2 (75^giEft$a^*^gP 2 9 8 fClB^^^tlT 

Xr-iy ^2 4 5(^f^^D0lZ, M(C 0 ^IS^^LTff ?g^J^ 
^[R 2 9 9 tClH^-rSo :/2 4 4 Oipj;£03^:^;<ft- 

^20i^^gP2 9 4 -C 

[0169] 
[S:3 0] 

p \ — mod 

^fhg:L'T, ^ 2 <D^iiEiSlg^^^^gl52 9 8 tciEii^tir 40 
ti^xtp;)^ S;:j^fij;£-r^ (X^u/y2 4 

8) . Xxu/ :7'2 4 8 O^J^tD^^^Ti^-ife-r-Sii^tCt^ 
Xt^u/ :/2 4 9 COf^feO IC, 1 2 4 CD^ 

i&O J|^A^(7?M (<J?iJ^t^l) \Z^'^t^. 7.5^-^^2 4 8 
(^ifyJ:^<^*im;>^-ifeL/ci:Viii^tcfi. ^ -tr- vMfc 1 
^SSJ^LT, mm,%^%l 2 9 9 (CfE^-ra (X5"-/y2 

tOf-^^i9fc. i , <^M;:i« 0 TfeS^fliSS-r^). i.Ofi/?^ 

0 (^ig^ti, ^1 (7>Tl53?ei5 293TR:=(CIIM) 50 
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" mod n $:ff-^LT, -ft 2 9 9 (ClS^f 

^ (Xt^-;/ y 2 4 8) o i . 0 RCDM 
^ 1 (w^^bT^$g^Jt^ 2 9 9 (rlB^T-S i.T^J'vzr 
24 10), C:^^'e;!>«^8(^*f^7'D Sn;P(-i5tt^ 

TsT-v^x ^ 4 (Dnmt^^mx^^. 

[0170] X5^yyi9 4 7:i<l^fT$n;^cS. Ts^'v'f 
1 9 3.f-t-/ h^n^ t , P r o V e r,. L ^^^f 
a (;^7^yyi95) o ;^7^y7'l95t)b< X y 
7^1 9 7 ;!f«|^fT^n?t 3ima5 2 9 l;5ie^IiE§l3'v. 
R^iilfi-r^ {:^5'y':fl 9 6) . 

[0 17 1] «^iE§§3fs, mm^ 2f}^^mm-^nr:LR^ 

^{fS5 2 8 2 tC^fibT, ft^«l^gB 2 8 9(3gS^1-^ 

(Xr-yT'iee) • R:=R' mod" n$:^10 
ll^^fflJ2 8 3 Tth^-rs (X5^'y r^'l 6 7) . CC^ff-^ 
^:^(^±ia<DtS;5^ ^lElf ^^l^gR 2 8 7 fCfS^^tlT 

(;^T-!yyi 6 8) , ~m.'r^m'^\t,mmm2i)^^m^ 

LxmKimLX 1 6 9 ) , £B:beP2 8 1 2^i 

^h^isbx. Mmm2f>^^mf3i^^yh^^'Oz:ti!)^^ 

:^rLtji/)^r:>yt<DX\ rffl^^j ^M^-t^mtj^m±t^2 
8 12 T&^effiyj-r^. 

[0 17 2] ^±f)^mB<DMm':ru hz2)ux$>^. tio 
>^ i . COM;^^ 1 tzIS:^^n^<!i, D^mmv^ux^^ 

[0173] 

,[^9] , , . 
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^ (I: 2: hiD^Mit) 

/J := modi/ 



p := ^ mod 

Mp = x 

M:=0 
elee 

p:=s mod */ 

f„ :— n 

M:=:l 
if a„ = 0 

(C7||Ar}^inodn 



10 



20 



30 



40 



[0174] [2. 1 1 . ^ 9 cojfc^ig:/D h 

J:-':>-'B^^^ U>i^ C^±$SLr^ Ctt. (r. R) ^'fij ' 
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[0 17 6] ^si^ 3 (D^m^umr ^^mmm<D 

((5, v) ti, ^ 6 co^^:/n h nji/^(Mi;-r^^o m 
9 ©MISya h 3 JU^, [21 1 8 0;^IESI 3 CD^mtc^ffi 

IE§§3;5>e.iEBJ§| 2^-^^^^ *:/-fe->?//7:;^ ^iE§l 3 

(0A:^Bis2 8 1 3 J:^ xti-^nx. xtimm^w^ 2 8 

[0177] IgfUt^S^fifegp 2 8 6 (CiSl^T. r ^ 

^J5£U, -en^C : = H ( r ) \z-:^\^ikm^\z 
jibT^A- U>'>*C^±fifeU, ^liE^f $S^i^^2 8 7 (C 
12^1-5 (T.^ryZ/l 8 1) « ^ IE b ^ <h -5 ^ ly 

ommi^2 ^mm-r^ iT.y^y:/! s 2) « 

[0178] SEH^g§2 7!ii^i^ e.nT#;t z :SMgl52 
8 2TgftUT, <t$S«i#gP 2 8 9 tZia^T^ (T^T^iy 
7^18 3) „ % i bT 0 $^ff iEHJg§275? 
^^/y N^£*#-:>TV>;^<T, R t b T 0 ^ ;t c: <h $ 

^^9J284(ci3(.^rU'X7}^>;:^p*, 

[0179] 
[^3 1] 

P : ^ ix \ \ u)^ mod u 

\zJ:v\zifM^-r^ <Xx-/:/i8 4) . ff-^b^cp^^j^ 

mm2 8 1 ^0Mm^2^mm-r^ (;^5r^y:/i8 

5) o 

[0 18 0] iiES>g§§2 d^6ii{t^n;t U;^;}^>XR^$ 

fiifi$2 8 2 (c^mbT, -If $s^^tifp 2 8 9 (cia^rs 

C^^-y-f 1 8 6) . R" mod n 1 CD^p^^BU 
2 8 3 Xsf»r^ iTsT-V^l 8 7) , C <^ ff^i^Sm CD 
±^ao*fT-75^, |glE<f $S^^^2 8 7i3iaS^$nTtri5C 
i-Scr^;!i^^, xE^^mmm2 8 bxm^t^ {TsJ- 
yZf 1 8 8) . T.r-y^ 1 8 8 X ft^'t\^. 7.^ 
y':f\8 \ -C^fiJcb;^SLifi: r^, X-5ryyi 86-Cff$S 
^J^gI5 2 8 9 {Cl2^b;tR<i:^m(CbT. f m SiE it $g 
i^l^SP 2 8 i 4 (Cia^-r^. ROTiifccof^J: 0 

UtOaib;tM$:. mEBJ^2;5f^^^ttU!o ^<i: bTlx 
t)mbT (;:?.'f';/:/189) , ffl*aJ281 2t^^^f^ 

•r^. ;^7"!yyi 8 8x—'^\^ut^-Dit^^\i. rte 

^:ic*-r^tii;^<&ffi;^gl5 2 8 i 2 ^. |±J:/j-r -5. 
[ 0 1 8 1 ] UA±;<|i^ 9 <^^^:/D h ^1 8 CO 

^m.^ 3 (D^m\zmm x^t^mxh^. 

[0 18 2] ^S#^^< bcDcfc-pfC, ^iJffi^<!:ft31A 

try h(Dmmm\znm^^m^(r>^^y y^m^ts,\.^v 
\tu'Br^t\^tw^m(o^^yh(D^'^^m^-r^. ^ 

"ry hi^M.t^'f'^ y h (7) SI IC tS ^ f >5 CO T -e<^ffiE*- * 

T^\z^^%^mm^m^{EL^'^-r^z^^ y h <Dmm.f)^%mx 



( 26 ) 
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[0183] mmMmmm^w^ 2 s i 4 \zBm^n^ 
mmt. :^mmm<D^o\z. ^^m^s tmm^ 2(0^1^^ 

ai:;'^: M ^7tr± invalid 



50 



[0184] 
[^10] 



r ;= rand . 
C := fl'Cr) 

srecciv© x 

riEceive iZ 
airi2^inod7i = (C||M 



ouLibpMt Snvstlld 
[0185] [2, 1 2 . ^ 1 0 o^ig:?^D hzi;u] 

8, EI 1 9 , E3 2 7 ) C 1^ {c i3 frt S M 1 0 <D^i§ 7" 

7tSiS:1t$acoiiE^7!i«^II§g 3 

[0 18 6] ^m^3 (D^m^m\tm9 <D:/n h=JJP<t: 

[0 18 7] 3 (D^mti^mt ^^mm^<D 

(<3, v) ;fecfcD:i^^1f $S(?5 (£, v)\ 5^^ryhMI^I 
^$SLI5^6 O^g&T'D hzi;Uti^L:T^-So ^1 OCD 

^f§:;^D h r3;i/CD:KgiEgg3 (^^mti^ 9 cD^^i§yp ha 
[0188] mmmn±M2 8 e JC^JI^T, SL^C r 

8g|Elt^^Jt«fP2 8 7 fCfB^-rs (;^^iy:/18 

c^. ^tsbx^m^2 B 1 ^ommm2^mmt^ 

{7.^y-f I S 2) . 

[ 0 1 8 9 ] fiEH^II 2 t^. ^K^3f)^ibmm^nfz 

(c, n) ^^m^ 2 9 2 r^m{.x. mm^i^&2 9 
9 (cKfsf^ (xt^^v 1 9 1) , hmm^ 1 2 

2\t^mLftn ^zM^^-r^^try h^^^y 50 



2 l^^^^LX. ^^y h^i^r}X^^^f)^^vf)^^^\l^ 
(X5^^;/yi 9 2) , ^f&f ^5^^r h ^l^y^/jili 

m^\z\t. u;^7}?>xR(c 0 ^£IS:;^LT, 'lt^^l^5pSS2 

9 9 (CfS^-r^ C^-r-u/ y 1 9 7 ) o M^^-f ^^^y h 
5"^r-/Ht, HiEBJfi 2 (D^JllP r o V 
e r,, ^^y hi^mmmh^iiy h-t^ {7.^y:fl 
9 3 ). o . • 

[0190] 7.7^ ';/yi9 3 7:f^^fT$n;te». T.v'y'f 
1 9 4 ^rUfrt-^o ^ 1 0 (D^iST'p hn;Kci5tt'SX 

7^^>:/i 9 A(D^mn,^m\^Wi2 7 <D^mx^^o isie 

mmm^^^2 9 a^zmmr^ i7.9-y:f 2 7 d , ^ 
^Lrcx^^^m^2 9 if)^^i^mm3^^m-r^ {7.9- 

yy2 7 2) . 

[0 1 9 1 ] ^liE§§3 J^, X^^m&2B2X^mL 

X. mm^^^ 2 8 9 \zss,m'r^ (XT-iy;:/! s 3) • 

X tLX 0 Mm^2f}^^^y h^i^ 

X. rm^} ^M^t^mtj^mti^2 s 1 2f}^<^mti 

LXs ^15:/ □ hnjU^ip^T-r^. A:^gB2 8 1 3J:0 
A:^$nrA:t?^f ^^1^052 8 l l t3^i6fB^$nTM 
-^-fe- v^zz ^j^oT, m 2 <^J|^^0B 2 8 4 (C*3t.^T 

[0192] .\, - - — 

[SC3 2] 

: = (>: I I mod i^- 




51 

5) . 

[0 1 9 3} mm^2\t. p ^^(t^ 2 9 

X. m^^i^^ 2 9 9 (ClS^-T'S (Xf^u/^a 7 3) o 
^2 Oi^^B|5,2 9 4r 

[0194] 

(S 3 3] 

p \ ^ mod ;^ 

^ii-^LT. 1t®«}#gC 2 9 9 fClS^-rS {7s^v^2 
7 4) • m 2 CO^IE1t^^l^g52 9 8 (CHE^^nTVi^> 
X <i:tf^b;t p c^±&cDfff <i:;!l^ - T ^ ^f^J 5t T ^ 
(;:^7-iy:/2 7 5 ) , 7s'rv^2 7 5 (^l^fj;^ coi^:^;5^- 
ifi: b;^cUiiei^fc{j:. ;?Cu/-fe->^<i:LTM: = l I I i. 
«:^3tbX, If IB^i^g^ 2 9 9 (3|E©-r^ {7.'rv^2 
7 1 2) c ;^5=-y:7'2 7 5 (D^J3^a)*§m;&^-ifcrsJ^^ 

(Ctt, X5='ty :7'2 7 6 t;^7^iy 2 7 7 (3 fC, p 

OT<a:(7D*fT75^e» SrlzOmUT, A:^1^^^I^^2 9 l 
ItClS^bT, MtC 0 S:ig;£bT, f&^^t^S5.2 9 9 Ic 
IH^r^. Xt^u/ 7^2 7 8 <^f^*:> »3 t LT, m^^m^ 
1 2 4 1 <75F*g^f|5t^Si^Jt^(Cf2^^nXL^^ j 

h^^^\Z\t,. 7s^y'f2 7 1 1 0 (C. j : = j 

- /i (h j <^M$:^® UT, M : =M I l/ichbTM 

0 (cSiMLT, M : = M I I J ^ bTMcDM^^Mr 

5. i^-rncDii^-et), mi<Dmnu2 9 str : = 

(CIIM)" mod n^Wr%hX. m%^m^2 
9 9 \Z^m't^ (;^5^!yy27 10)o Cd^TT&^m 1 

1 9 3 -C-t h ^^afc t . Prover,, L ^^1^1" 
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^ (X^'^:/19 5) • Z5^'y:/19 5t)L<(i7.5ry 
1 9 7^?|^ff ^n;^ce. jgfiSP2 9 1 ;f5i^»^IE^ 3^ 
R ^mm-r^ iT.J'vZfl 9 6 ) o 

[0 19 6] feiiEggsfi, mmm2i)'^ibmm^nrzvy^ 

>J^>XR$S{iBI5 2 8 2 (C^ftUT, 'ff^^^a52 89 
tClBi^t"^ (;^'f-!y 2" 1 8 6 ) o R' mod n 
1 C0ltegl5 2 8 3 Tffgcr^ (XT-:yyi87) . CKD 
fi-gti^^(D±{a:(0fff7:f^ ISiEif ffi«J^§|5 2 8 7 fZ|2^$ 
tlTl^SC «J:-g:-r*;^^^, iE^1§«^giEBB 2 8 5 T^'J^ 
10 -r^ <;^-r-iy 1 8 8 ) • X 5^ 1 8 8 T-i^ L ;^cJ^ 
X5=";/y 1 8 1 "C^fi^Lfca^ r i:, ;?.^->:/l 
8 6Tif|S^J^gP2 8 9{c:I2^L;tRi:^M(CbT, m 
^iE8!l1f^^^#§P2 8 1 4 tClB^-r^o ^"^.tC, R(DT 

L-TIX 0 ttJbr (Z^^*^ 7^1 89) , ai:^ffl281 
2ii^it>m-h't^. X^ry-y 1 8 8X-mVfJi:^^-orci^^ 
\t. r^^j ^:t^-r^tB:^^tt3:^^2 8 i 2-fy^(^mt} 

[0197] &s±^^m 1 0 <o^i§:/D K n;u-ed&s. ^ 

20 7 (DMmzftJ hzi)[.X\t. ^'ryhn\zm,ti<r^t}0>^ 
C'57&^S75:S- ^ 7 <C»:/D h n jpti, ^ ^ v h — r:>ti^'^ 

mm'r^iL^\z\^^i\^t\w\<r>^^y h^^-'^tt^ 

[0198] 

1^1 1] ■ - , . - 



( 28 ) 
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Prov(6r 
fM\e 

X •= rand 
sejad X 

if modi' = X|lA* 
M:=0 
5f /A </ 

M := Af Hp 
else 

M := M\\i 

M := l||i 
R:= (C||M)^modn 

[0199] 12, 13.^11 <DMm-:fa h^)U^ 

1 oo^^y a h n JPT«, lE^gg 2 t^^4&^«C)6n/t^ 
fC<^SiE?^^J![IS:ff gE b.^ S§ 2 i& © SE §g ^ lH 

[ 0 2 0 0 ] [2. 14. ^ 1 2 O^fgyn ha;H 

[ 0 2 0 1 ] SE^'Sg 2 (c:$iJ|®^S:75<^ 0 , LtZli£B>g^Wl 
[ 0 2 0 2 ] iE^¥Jli0^x.75^^ti. ^Jl€:aa)2ti-r^fH 

[ 0 2 0 3 ] mx 2<Dmt^U hnjK7)SEff^§g2CO^MI 

^0 1 9 *3 jcD^iii 3 1 lc^^^■pTiJ^BJt-^. Lo^^fc, ^ 

lE^ 3 (D«^E<0||fTCO^il f , ^SE§g 3 O^IEtCi^I^M/'ct 
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P.. P,. P,. P., P,) <D^o\zm^^t\X\^^^t 

[0204] ^mm2 9 2 X^M^Zf)^^ (C, n) t: 
^mLX (7.5^ 7^1 9 1) , mmi^t^U 2 9 9 iCgS^ 
r^. hJ^S0|5 1 2 2 (SSm L;^ n (C^/^c-r-S^^ 



t^'Dx^^^ti^dvfi'^^Pi^-r^ {TsT^yz^ 1 9 2) . n 

^SS^br/ if fS^}^§S 2 9 9 (ZiB^f 5 C^v^yrfl 
9 7) . Mft^r^^^y h^l^t?^^(cJi, 5^^-; h 

t , mmm 2 (D^jnp roveri, ^try hniiumm 

L^-feyhT^ (7.7=-y:7'193) . ^12 <D^fS:/P 

Proveri<^-feiyh(C*3l>T, L;5^^ 
(f. V. £, Po. P., Pi. P». Pi. P.) 

30 [ 0 2 0 5 ] y 1 9 3 T&^Hfr 5 tlfc e> , X 7=- 7" 

19 4 ^llfr-rSo m 1 c^^f^T'D N3;UfC*3tt5>;7" 
'y 7^19 4 (^PjM;^^|tlI^-EI 3 1 tC^-r. ff}^^X$>^. 
i^^m^-r^ i.T.'ry'fZ 10 1), f T^iiEbfrtnt^, 7. 
J-y-fZ 1 02;5i^»;;7^'y7'3 1 0 9 ^r^llff T^. 
[ 0 2 0 6 J ^iiEff ^±^EK§i5 2 9 6 -I?£L^%^^fiEL 

^2 (0|giiElf^^J^a5 2 9 8 (CfB^-r^ (^^•r'^yT' 
3 10 2) , illfig|5 2 9 l<i;0^iEg|52'^.z ^^{f^^ 
(X7^y7'3103)o i^m^2 t^ii^'^m^tltz. p 
mgP 2 9 2 "CSMlxT. if IS^}tgP2 9 9 {CEB^T^ 
40 (XT-y :/3 1 0 4) c 
[ 0 2 0 7 1 
[^3 4] 

mod 

7'3105).Xxu/3^3105 CD^^7&<^ Ll^^ii^lC 
\t. X^r-y 7^3 1 0 6 iXT^ty 7^3 1 0 7 ^r^^T-T'So 
M(C 0 ^I^^^LTif ^g2«!igI5 2 9 9 tCgaiik-r^ ( X 7" 

iT.^yZfZ 10 7). XT- 7^3 1 0 b<Dfi^^'h^mL 
SO < /ctl^iig'&icti, XT-'y :^3 1 0 8 tX5"'y 1 0 9 
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^HfrfSo M(C 1 ^iS:£bT<t^fB^^2 9 9 fcfa^ 
•t^ i.T.'rv'fZ 10 8), P, CD^^tjb < ^i^^p 
^g|ff-r^ y 3 10 9). 

[ 0 2 0 8 3 P: L < ^i^^l^^^ffT-S C;:^ 

X!y:/3 1 1 0) • P,©^^t)U<{t#^P^IIfTL 

i^^;<im/r?^^;&^*ij^r^ (Xt-*>^3 1 1 1 ) 
;^7=-!yy3 1 1 1 (Di®^75^K<DJ^^ti, ;^5^y:/3 1 1 
2 <h7.7^'y y 3 1 1 3 ^Hfff^o P4C0^^t)L<ti 
^^^^llfrf^ (X7^u/7^3 1 1 2) . R : (C I 
I M) " mod n 1 (Otl^#^2 9 3 Tft^b 

^f IS^f^g(5 2 9 9 (Cia^-rs iT^^v^Z 1 1 
3) . XT^yT'S 1 1 1 (Dj^^T&^K-CT^CUiJSii^tCji, X 
T"y>^31 14i:X5=-'y:/3115 ^HfTT-So P . <^ 
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^^t>b< fi^^S^^^tf re (7.^'yy3 114), 
R^KC^^LT, If $5^f#gP 2 9 9 fCfS^-r-S <7.-5r 
•:/7'3 1 1 5) • CC:£T;&^^1 O^M^o hzi;Kc*3 
ttexf^u/ :/ 1 9 4 Of^M/^^M-Cfe^c 
[0209}X7=-*>:?'19 4 /tf^Hfr^nfce . x^v:/ 
1 9 3 -e-t y h^nfe t . Prove. ti, L^i^f^T 
5 (X5^u/yi95) o X^:y37'l95t)U<liXx^> 
yi 9 7 ;!?^^fT$n;t 6. 3^fi0|5 2 9 it^ibi^mmz^ 
R^mmr^ {TsT-v^l 9 6). 
10 C 0 2 1 0 ] i!iA±?!l^^ 1 2 (Dnm-fU h HJUfCiStt'SiiE 

[0211] 
[^123 
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57 58 
<^Mm»: (n,J5) 

A:^: /I 

m:^: M -^Itn mvaHd 

C := rand 
send (Ctn) 
receive x 

send p 
receive R 
irR^modn = C\\M 

output M 
else 

output invalid 



stmm 

receive (C7,tt) 
find {n,i,L) 

fMmPo\lPt\\P2mi\P4\\Ps := 
if/ 

X := rand 
Mod X 
receive p 
if modi/ « xWm 

M:=0 

Po 
else 

Af :=1 

Pi 

P4 

K:=<q|Af)^mod» 
else 

A undeftad 
send H 

[0212] [2. 1 mi ^(Dnmzfuhziji^] 

(^iESiSOl^^. ^30) CO%B^lc4B^t^m 1 3 <D 

So 

[0 2 1 3] 1213 o\t::<D^myo K=i;i'^ff7^cto^iE 
[0214] ^iiE§i3 \t^m^^t£-'r ^mmmm d fCct 



40 ^nfc©*-^^<&stc:??^^b-r^o 
[0215] [3.^2 <D^mm] 

[3. 1. IglE^fi] :*:^JE^JT(^, 5^ ^ y h- t^^^^tf 

= g'T^^r^fc^n-St^, (p, G, g, y, x) 

h<D^m^nT$b^. (p, G, g, y) ^ 

Ot^T, ^ii-e^<b5^^r hOg^E^:;^?£lCt3tiT8^i2It-r 
iO -5. 
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[0 2 17] m^\z\ts G^mmi^(Dm^mti.xmj^ 

[0 2 1 8] MA-fr^, <P, G, g) ^z^TsT-A^mt 

t. L) (CjfctUTliEejgiS^'lt^d, i£:ffiC^T T (C. 
y, t. L) =C'7&mS:-C#5«t^tCl^lfijc-r§o 

[0 2 19] m7L\i,. ^^,^^^n^%<nm.^^t.'u. lo 

T^c^^, t : = (Ea (x) , H (d, I I X I I L) ) 

[ 0 2 2 0] 5^^r^> h$:±Mi<^*ll{C^gg*r^<!:. ^.^-y 

(C, y, t, L) (c:^bTIiEB^§g2 (^SWIf iado*C 
ctoTEu (D) ^^-^bTiE0^§§ 2 i^f D SrlEl^b, 

[ 0 2 2 1 ] "^tL. dg^-:^rRj14^^t UT. t=x 
-da (L. y) i^aiSCiifc-eg-So 
[ 0 2 2 2] 5=^ir-/ N CD CD^^ Ic J; nt^ , A:t; 
(C. y. t» L) (C^bTD(c:cfc5)?^^{t:fiC' C 

[ 0 2 2 3] ^^\%m'^^m^m(omm^\z'$t'^^o>^ 

[ 0 2 2 4] [3. 2. ^ 1 4 CO^^IT'D h 30 

[ 0 2 2 5] :^iiEg§3 \%. ^SE^f ^^^^ 2 8 6 J; 

^^UT. ISIE^f ®^J^gP 2 8 7 fClB^-r^ (TLt^-^/T^ 
l31)o;^x^y7'l32 (Df^b 0 tC, iSiHf ^^^tgP 
2 8 7 {ClS^^n;^cC l^^if ^y ^^<i:«6T, 40 

2 8 1 J: *9iiE0^ll2 'sj^ff-r^o 
[0226] X7^^y:/191 (7?{^t? 0 (C . SE^§5 2 
:^iiE§§ 3 ;5^^Sfi$n>t (C. y) ^S{tgP 2 9 2 TS 
flLT. tf ^^}tSI5 2 9 9 tCEBI^I-^o ^^ryh^^^ 
1 2 2ti^ff L;^y tz^f£;r^5^^'y V^^^r v 

1 2 1 ;5^e^LT, -^^^r^y h S:l#-:?Tli^;5i£^;^i^^ 
fiJ:^-rs C^xyT'l 92) . \^7sit^>7.1^\Z^^-j V 

T, if$5^J^g|i29 9lCfHiSrS (7.7^:y:/19 7) . 



x7=-'>:?'i 9 zommomMtLxnit^r^^^y 

^Oi^^tCt^, 5^^*yht, lE^^ 2 (O^H P r o V e 
r,, 5^^^;/ hf^2JDltlgL^^^g|5 2 9 1 2 F*9t;:-t y h 
-r^ (Xt^ 7" 1 9 3 ) c 
C0227] ;^x':/7'l 9 3 A^Hfr^nfc^, 7.J-v^ 
19 4^SlfTt*^. C10^t§0«si(c*$(j-^;^7^>y 7" 1 9 

^#g^sl 2 4 cD^2 of^6B^si^}ta575^^^^^aib;^c^cr) 
(;^T-u/7'2oi). v^^nx^^ ^n'^X^fz- 

^^\Z\%. % 1 <DS^#gf5 2 93 {Ci3ViTR$, R:=C 
'0<i:3{CffPtbT, ft ^^J^0B 2 9 9 dlS^r^ (X 
'7^*i^:/2 0 2 ) o it^tCRCDCOfhgC^, iE^ISg 2 O^^CO 
111 C^i^it^ 2 9 3 rr^Tff#LTfe<tVi;&^ ^^r^> 
ht:<i«t = x-d, (L. y) p ^ tiT ^ 

^-St^X, C $rSEa^li2con'rff-^bT, SE^S 2 (D 
^(^^ 1 (^ill^gfi2 9 3 Ttf#L/tC'""'* i:=£SE^ 
ii2cr)^-C^tt^to-l^:Tt>ff^T#^. IiE^I§2coff^ 

^u/:/2 0 \ \z^\i^x^^ V h ^ii^-e^^ (hifyj^ Lfe 

1 2 1 TJi^^iJI^Si LT (::^5^iy :^2 0 3 ) , R (C 1 ^WL^ 
bT. If ffl«^#lfl5 2 9 9 tCia^r^ (Xx'^:/2 0 

4). c:c:^x/>^c:(^M^oM(c*3^t^X7"'y 7^1 9 4 

[0228 ];:^^y7'19 ^ ^ t\.f:L ^ . :^^yzf 

1 9 3 T-fe -/ h $n/i t . P rover,, l^tiUnB 

2 9 1 2;5ieMf^'r^ (;^7^!y:^195) . 7.^yZfl 
9 5 feb< t^XT^^y 7^ 1 9 7 7!>^^fT$n^^», R^iSlfi 
ei5 2 9 1 J: 0^iEfl3 ^^mr^ (Xx^;;:7M 9 6)..- ^ 

[ 0 2 2 9 ] ^SE^ 3 t^. 2 8 2 (Z^ViTliE^il 

2 ^^6iM(t^n^cR^SmbT. 1t^^ltaP2 8 9 (CIH 
iiTS (Xt-.-z^I 3 3) o y ' 1 (OSI^gi5 2 8 3 
TfhffbT. ^cDfi-g:^^^;:f^R t-ik-rs;^^^, lE^fi 
^iE^2 8 5 xn^-t^ y 1 3 4) . -ifcT^ 

<h4^iJ^$n;tii^lliE3J§l 2;&^^3^;5:5^^r'y h^^^X 
\.'^^Z.ii^7r^r<OX. r;t^J ^lc*T^£±i:^^ai;^a5 
2 8 1 2 J; 0 ttJi^f-S. -i!cb/j:^i(h^J3£$n>^4i^Ji 
liEB^f§2;0^^5^;^i:5^^'> V ^mr>X\^^ ^ :i tt^jr^^ nts. 
i)^->tz(DX. ^^1^1 lc^-r^a5:^&ai:^^2 8 1 2 J; 

[ 0 2 3 0 ] J[^^±;5<^ 1 4 <7)^i§yD h n^p-C^-S. B 

[ 0 2 3 1 ] 
[^13] 
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r rsiad! 

send (Cfy) 
receive R 



[ 0 2 3 2 ] [3. 3. m 1 5 (D^iiyn h n;!.] 

EI 3 3) ^1 5(OMmzra h^ji^-x^mm-r^^ir y hm 

C0±PSM i :^«'^^nTli-5 C i^fJ^Jcr-S. M 1 5 CD 
^^:/P M3JKc*3tt^^SES§3CO^Jil€:I2I3 2 tC, H 

CO 2 3 3] ^iE§g3t^, mmmmi^^mz s^^z^^^ 

^fifeLT, ISSElf ^^J^015 2 8 7 tClB^-r^ iT.^v'f 30 

3 2 1) • ^lEif ^«J#lfl5 2 8 7 fCfS^^ny^cC <i:. i> 
Mft^y^* ti^T. i^ftSe 2-8-1 cfc y)M^n^2 ^'^m 

(P^v^y 7^3 2 2) . 
[0234] 7^7^ *>yi91 (Di^iD 0 tC , |iEH>ggg 2 ti, 
^iiEil3;5^e.i3^m^nfe (C, y) $:Sm^ 2 9 2 T^ 
^bT, tt?S^f^e!S2 9 9 tClBI^-rao 

1 2 2 ti^mb/^y tc^i«:;-re^^r h^^^u/ ^^^^ 
1 2 1 ;6^e^LT, ^try h^^':>X\r^^f)^^v^'^ 
m^r^ C^T-yZfl 9 2) • MJtst^^dry h^i^fz 
U^>m'^\Z\t. U7.t^>7.R\Z0 ^I^^LX . m^UW^ 40 
^2 9 9*^15^1"^ (X7^y:;^l 9 7) • 

over., ^^'^ hf^iJDlt^L^-fe'y Kr-S 
:::^193), Prover,(D-tr*:/h<!:LT, L<fcD 
(7j, i ) $UlOaiLTi3<o 

[0235]7.7"*yyi9 3 T^^l^fr^n^e . 7.7- y-f 
194«rllfT-r^. *:/Dbn;Kci5tta;^-r*>7'l9 

4 (7) i^j^a/ci::^ lli^'.El:3^ 3 tz ti!^ o § • IS liE 1W $fi ^ 
fi£SI5 2 9 6 ^A- U> vTiL^ s ^^fiJcUT, %:=g* 

i: LT^r U>vx ^^JtJcLT. ^ 2 c?D IS IE 1^ $S }^ «fl5 50 



298tCgB^-r^ (X5^'yy33 1) . j^fifP 2 9 1 
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Sitbfcx T^^O CDli^ti, h75^^<-rR7&^0 <hL 

Tiiien;t c:<h^^-r<^T, r^^j ic^r sffi;^ ^tU 
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sot?, f\im^i)^to:>^^^^m'r^c t-Cs mmmcD 

^mx^^. 30 
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D— hT^-S, 
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^•^-hr^Sa 40 
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[01 1] mBA^f}^^\H^mm^mmi-r^^m^wim 
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fiS.^&Tik'r'fOy^mV^^. 50 
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- 

[0 2 9] iE^^^jll^^T^ifecD^^^^-rr^P *y<>0 

[03 0] ^^r h^IE§§©^^^^*r:/P i70-e 

[03 1] 5^^r^> hIEB>^^|li^£i5£B.^-r^ >^P"^^- 

[0 3 2] H«^iEO^Ii^|5iB^-r'5 7 P-5^^ 

[03 3] ^^r>:; hIEB.g^lll^i5£BJt- S7 P-^^l-- 
[^?^£^i5iBJ] 

1 hf-^fiS • ^fr^l^ 

2 h££?g^il 

3 ^^y h^m^m 

4 hf^^^lS: 

5 ^ >^ y K % fr ¥ ' - — — ^- .v-: - 
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